Task: attack_reconstruction (flaws_cloudtrail)
Prompt: Review the CloudTrail records for a session-credentialed principal that moves from storage discovery into object access against an S3 bucket. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain you reconstruct, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4919ad55-22c1-4e29-addd-2625121e28e2", "record_id": "flaws_cloudtrail:0000000:4919ad55-22c1-4e29-addd-2625121e28e2", "row_index": 0, "timestamp": "2019-05-04T13:25:03Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.232.250.148", "user_agent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4919ad55-22c1-4e29-addd-2625121e28e2", "eventTime": "2019-05-04T13:25:03Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.232.250.148", "userAgent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c26d6909-8f03-4cf1-b849-3a68d7155b87", "record_id": "flaws_cloudtrail:0000001:c26d6909-8f03-4cf1-b849-3a68d7155b87", "row_index": 1, "timestamp": "2019-05-04T13:25:18Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.232.250.148", "user_agent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c26d6909-8f03-4cf1-b849-3a68d7155b87", "eventTime": "2019-05-04T13:25:18Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.232.250.148", "userAgent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c26d6909-8f03-4cf1-b849-3a68d7155b87", "record_id": "flaws_cloudtrail:0000002:c26d6909-8f03-4cf1-b849-3a68d7155b87", "row_index": 2, "timestamp": "2019-05-04T13:25:18Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.232.250.148", "user_agent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c26d6909-8f03-4cf1-b849-3a68d7155b87", "eventTime": "2019-05-04T13:25:18Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.232.250.148", "userAgent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db90d105-68e8-446e-bb48-c2e51a65853", "record_id": "flaws_cloudtrail:0000003:db90d105-68e8-446e-bb48-c2e51a65853", "row_index": 3, "timestamp": "2019-05-04T13:25:24Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.232.250.148", "user_agent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db90d105-68e8-446e-bb48-c2e51a65853", "eventTime": "2019-05-04T13:25:24Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.232.250.148", "userAgent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db90d105-68e8-446e-bb48-c2e51a65853", "record_id": "flaws_cloudtrail:0000004:db90d105-68e8-446e-bb48-c2e51a65853", "row_index": 4, "timestamp": "2019-05-04T13:25:24Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.232.250.148", "user_agent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db90d105-68e8-446e-bb48-c2e51a65853", "eventTime": "2019-05-04T13:25:24Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.232.250.148", "userAgent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c36e3229-ef7d-49c2-b802-01522fdc9b42", "record_id": "flaws_cloudtrail:0000005:c36e3229-ef7d-49c2-b802-01522fdc9b42", "row_index": 5, "timestamp": "2019-05-04T13:26:14Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.232.250.148", "user_agent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c36e3229-ef7d-49c2-b802-01522fdc9b42", "eventTime": "2019-05-04T13:26:14Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.232.250.148", "userAgent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c36e3229-ef7d-49c2-b802-01522fdc9b42", "record_id": "flaws_cloudtrail:0000006:c36e3229-ef7d-49c2-b802-01522fdc9b42", "row_index": 6, "timestamp": "2019-05-04T13:26:14Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.232.250.148", "user_agent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c36e3229-ef7d-49c2-b802-01522fdc9b42", "eventTime": "2019-05-04T13:26:14Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.232.250.148", "userAgent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d321b50d-f2e8-4186-8849-ab6ba1ab8d9a", "record_id": "flaws_cloudtrail:0000007:d321b50d-f2e8-4186-8849-ab6ba1ab8d9a", "row_index": 7, "timestamp": "2019-05-04T13:26:29Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.232.250.148", "user_agent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d321b50d-f2e8-4186-8849-ab6ba1ab8d9a", "eventTime": "2019-05-04T13:26:29Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.232.250.148", "userAgent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d321b50d-f2e8-4186-8849-ab6ba1ab8d9a", "record_id": "flaws_cloudtrail:0000008:d321b50d-f2e8-4186-8849-ab6ba1ab8d9a", "row_index": 8, "timestamp": "2019-05-04T13:26:29Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.232.250.148", "user_agent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d321b50d-f2e8-4186-8849-ab6ba1ab8d9a", "eventTime": "2019-05-04T13:26:29Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.232.250.148", "userAgent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "542e1589-a7ae-4666-8cd4-ff535620bdea0", "record_id": "flaws_cloudtrail:0000009:542e1589-a7ae-4666-8cd4-ff535620bdea0", "row_index": 9, "timestamp": "2019-05-04T13:26:44Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.232.250.148", "user_agent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "542e1589-a7ae-4666-8cd4-ff535620bdea0", "eventTime": "2019-05-04T13:26:44Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.232.250.148", "userAgent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "542e1589-a7ae-4666-8cd4-ff535620bdea0", "record_id": "flaws_cloudtrail:0000010:542e1589-a7ae-4666-8cd4-ff535620bdea0", "row_index": 10, "timestamp": "2019-05-04T13:26:44Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.232.250.148", "user_agent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "542e1589-a7ae-4666-8cd4-ff535620bdea0", "eventTime": "2019-05-04T13:26:44Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.232.250.148", "userAgent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efb142e7-e3fc-46e9-9e1e-136b931fea85", "record_id": "flaws_cloudtrail:0000011:efb142e7-e3fc-46e9-9e1e-136b931fea85", "row_index": 11, "timestamp": "2019-05-04T13:26:57Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.232.250.148", "user_agent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efb142e7-e3fc-46e9-9e1e-136b931fea85", "eventTime": "2019-05-04T13:26:57Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.232.250.148", "userAgent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efb142e7-e3fc-46e9-9e1e-136b931fea85", "record_id": "flaws_cloudtrail:0000012:efb142e7-e3fc-46e9-9e1e-136b931fea85", "row_index": 12, "timestamp": "2019-05-04T13:26:57Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.232.250.148", "user_agent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efb142e7-e3fc-46e9-9e1e-136b931fea85", "eventTime": "2019-05-04T13:26:57Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.232.250.148", "userAgent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "107920b-8882-4af0-b02a-a38aa4e517d9", "record_id": "flaws_cloudtrail:0000013:107920b-8882-4af0-b02a-a38aa4e517d9", "row_index": 13, "timestamp": "2019-05-04T13:27:30Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.232.250.148", "user_agent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 661, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "107920b-8882-4af0-b02a-a38aa4e517d9", "eventTime": "2019-05-04T13:27:30Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.232.250.148", "userAgent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "107920b-8882-4af0-b02a-a38aa4e517d9", "record_id": "flaws_cloudtrail:0000014:107920b-8882-4af0-b02a-a38aa4e517d9", "row_index": 14, "timestamp": "2019-05-04T13:27:30Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.232.250.148", "user_agent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 661, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "107920b-8882-4af0-b02a-a38aa4e517d9", "eventTime": "2019-05-04T13:27:30Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.232.250.148", "userAgent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52a7b085-937d-4666-ab2a-a98b73b25537", "record_id": "flaws_cloudtrail:0000015:52a7b085-937d-4666-ab2a-a98b73b25537", "row_index": 15, "timestamp": "2019-05-04T13:27:36Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.232.250.148", "user_agent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52a7b085-937d-4666-ab2a-a98b73b25537", "eventTime": "2019-05-04T13:27:36Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.232.250.148", "userAgent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52a7b085-937d-4666-ab2a-a98b73b25537", "record_id": "flaws_cloudtrail:0000016:52a7b085-937d-4666-ab2a-a98b73b25537", "row_index": 16, "timestamp": "2019-05-04T13:27:36Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.232.250.148", "user_agent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52a7b085-937d-4666-ab2a-a98b73b25537", "eventTime": "2019-05-04T13:27:36Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.232.250.148", "userAgent": "aws-cli/1.16.81 Python/2.7.9 Darwin/15.6.0 botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "717bd6a1-1573-4722-9ad0-9219e56e3e5b", "record_id": "flaws_cloudtrail:0000017:717bd6a1-1573-4722-9ad0-9219e56e3e5b", "row_index": 17, "timestamp": "2019-05-04T13:29:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "717bd6a1-1573-4722-9ad0-9219e56e3e5b", "eventTime": "2019-05-04T13:29:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALC83WLX4SVKP2KPG", "expiration": "May 4, 2019 8:01:57 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "717bd6a1-1573-4722-9ad0-9219e56e3e5b", "record_id": "flaws_cloudtrail:0000018:717bd6a1-1573-4722-9ad0-9219e56e3e5b", "row_index": 18, "timestamp": "2019-05-04T13:29:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "717bd6a1-1573-4722-9ad0-9219e56e3e5b", "eventTime": "2019-05-04T13:29:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALC83WLX4SVKP2KPG", "expiration": "May 4, 2019 8:01:57 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "057f2d4f-8155-4f53-a9db-7dc27396d9f1", "record_id": "flaws_cloudtrail:0000019:057f2d4f-8155-4f53-a9db-7dc27396d9f1", "row_index": 19, "timestamp": "2019-05-04T14:29:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1890, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "057f2d4f-8155-4f53-a9db-7dc27396d9f1", "eventTime": "2019-05-04T14:29:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAROREE7BY3XXDRLUH", "expiration": "May 4, 2019 8:35:48 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "057f2d4f-8155-4f53-a9db-7dc27396d9f1", "record_id": "flaws_cloudtrail:0000020:057f2d4f-8155-4f53-a9db-7dc27396d9f1", "row_index": 20, "timestamp": "2019-05-04T14:29:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1890, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "057f2d4f-8155-4f53-a9db-7dc27396d9f1", "eventTime": "2019-05-04T14:29:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAROREE7BY3XXDRLUH", "expiration": "May 4, 2019 8:35:48 PM", "sessionToken": "AgoJb3JpZ2luX2VjEO///////////wEaCXVzLXdlc3QtMiJHMEUCIFJlLfVKBslsKI38mQ/Ah0PrHOIzoasrgwELtnHDAcDuAiEAh7WoeqPUoJW0Qi+wS1ic9n71ha07BUKxE3s63H9ZdHIq4wMI2P//////////ARAAGgw5NzU0MjYyNjIwMjkiDMspjNneJRCDisYtrSq3A/UVSdqaLboSr1xYqt3O/hHOdakrVMKZ0CgqCMDkn6ekQA4gUDJ8r8UPdM0XqXAGkrloYteGbWwuxH6LhbmLRdedkra/REaHtUJILp3K8nK/awHTymfZuE91CWLML5o3rmRSnZ00gcYRTfMQazFGQBQ5KSxCdd2MIM4oe2KxOMXpEN1Vey+pPjRJ4nUJnf1o8P7NRcjWQgRoJkhiyjGi7+JW7Z583RBD70V6Vm7uCLflp70UZv8eU+mSEeLqKNPQM4y3aKkojtGOO11Yw3l23cVUNJEBL+2Lh6ldonv7gqGSwivZDTITAYPjDdn5mlo6VkJwIJVRFRZDuNHXHjTKL0VCOBGdVlWgebsEQ8wMQkmIIDa+azJQZOzqKIzz4fbbfCJzAoCpTPdNR9ydsEwM3IuTOrvIlDHwj+yHEQjZV6xP4MqhUeDxAet7jDFAgY1nD7VQ/eZvVQMA080IWefF+/P+gsnhSom/kRDti35x6KFhQkJEqbBk7bUPkoJ3ef/16H89hcwyGMTsGxHL0jZEIU1YY1xp+NKmtMrROlHB0Lfke3yQiPqP13DsQNrYgaw7avuKjZ96Ia0wzsO25gU6tAFR5QbrUCaVphYzSp8SB5qv+hQ30L+IQ0dOOOS2pCk5ezbQ/M+TgcuCrjux2WAuCDXXUsLoTYbjHkT52Wvr8WqA2r21YihRkCjt+x4WM39blyj5vYw22+wa/SPItwVMmJ8NnNZwRyZYkS9yEXEnu9fWFr7XSdj1wyiVDfjpmhs8P3T6GkKxA22pBVyMtoUxcjaYGgjEK+veZf2a9THNZlUVypf+Zy3BksGF56oZE1wqzWLksZE="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eab3710b-834c-4759-83aa-aad634578536", "record_id": "flaws_cloudtrail:0000021:eab3710b-834c-4759-83aa-aad634578536", "row_index": 21, "timestamp": "2019-05-04T15:29:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eab3710b-834c-4759-83aa-aad634578536", "eventTime": "2019-05-04T15:29:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGWTOBUPB6WFFHCNJ", "expiration": "May 4, 2019 9:37:33 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eab3710b-834c-4759-83aa-aad634578536", "record_id": "flaws_cloudtrail:0000022:eab3710b-834c-4759-83aa-aad634578536", "row_index": 22, "timestamp": "2019-05-04T15:29:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eab3710b-834c-4759-83aa-aad634578536", "eventTime": "2019-05-04T15:29:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGWTOBUPB6WFFHCNJ", "expiration": "May 4, 2019 9:37:33 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "678b648e-16c1-4082-8e66-7eee38ff8774", "record_id": "flaws_cloudtrail:0000023:678b648e-16c1-4082-8e66-7eee38ff8774", "row_index": 23, "timestamp": "2019-05-04T16:29:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "678b648e-16c1-4082-8e66-7eee38ff8774", "eventTime": "2019-05-04T16:29:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAST107RDAWVP1CRLZ", "expiration": "May 4, 2019 10:30:58 PM", "sessionToken": "AgoJb3JpZ2luX2VjEPH//////////wEaCXVzLXdlc3QtMiJIMEYCIQD7wr+pQZmTVCjGMZf+dg9PwXq2BWgeT1NVEkxnznNVZQIhAOUN9iIY3nuD5geqWSN8MbNZKy+/Wy5sD//CKN75vsMKKuMDCNr//////////wEQABoMOTc1NDI2MjYyMDI5Igwhf863AcqZsoFOfpUqtwNZIUKNAbTLRHQxyDYz5jNN0ID9rWslqoPC1W1PK94Tv+Wc5CK0dQEhhL9qvoXQUHlEQKvt21QvhBXOzjgfLTLaJZ/rxjz2DhJZhk7UrERi6MSg2i44riWJWSPh6UjwOuR29TGUfERP7/q/jCkPci2Nkn5SWDw//UNOfnBSNHutGlKmlknc1Ev9Q9YgkIAWumq4uFdnabIMg0T1RE+hGilrWq8u+RlTv0TcSL0KVH0KWVcHldrwhGp0maY8OpP/OHIrnu8kiQ4nMamjGVwsc93jm3yhDMehXaDgwjwNz9/IaujjOhSWExdhuYEp4dl3lSLyPGReoLJNkAG7Cc1STtIuUZC8m1uAIRDifxb5MrTYxQY9vQCgBzrYLu/1g1CszUzZjx/HMq4WCn5jclibXUOqxg18EOAzAaSNhLZHTuiu2/JiNIrJHIp2iB6ZrcDO201lTLm/jkDRPbU+DvDI9yp5qXOCD+Et4hZCoQjqAc/6YqdX7yvRKUpalALH0VKO0C9t3A6cjJpVMxI25iKPjP72RyvdkOqKEzIkIgQgkmM9w5gKrsEN8JQ82ssk0r4Ry9JrRDh2hJT5MO77tuYFOrMBvkh4zxh5E5Jevaw546RD70+RjhLeY6E0kgZUaNskabMR6m9XRCpc64PZ+WzyXt1a8ZSJSVeiUi5aBK7EWoDF/noouych3GfqhlQcNsFwN/YGmtZwiI0HT3o13n+CN/57BV1WNT9rRcP7q7QyFcmvgvQpmP0YpX6bM/7k25TqlzvYaGVDmiBu6W6hduC29ikkAfz7Yx0/NfCgKabU6YdkJBEojNSw29+cuAeSx3whB06Gp8w="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "678b648e-16c1-4082-8e66-7eee38ff8774", "record_id": "flaws_cloudtrail:0000024:678b648e-16c1-4082-8e66-7eee38ff8774", "row_index": 24, "timestamp": "2019-05-04T16:29:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "678b648e-16c1-4082-8e66-7eee38ff8774", "eventTime": "2019-05-04T16:29:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAST107RDAWVP1CRLZ", "expiration": "May 4, 2019 10:30:58 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fea61436-6634-4adb-8fff-69739198fa00", "record_id": "flaws_cloudtrail:0000025:fea61436-6634-4adb-8fff-69739198fa00", "row_index": 25, "timestamp": "2019-05-04T16:38:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIABX5HC3VQ4F604ZPY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.205.226.94", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/data-reader-33"], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fea61436-6634-4adb-8fff-69739198fa00", "eventTime": "2019-05-04T16:38:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.205.226.94", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIABX5HC3VQ4F604ZPY", "userName": "backup"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/data-reader-33", "roleSessionName": "reader-3381"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/data-reader-33"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cfadbfe-dfea-4714-949d-95f0670c2bd4", "record_id": "flaws_cloudtrail:0000026:6cfadbfe-dfea-4714-949d-95f0670c2bd4", "row_index": 26, "timestamp": "2019-05-04T16:39:26Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIABX5HC3VQ4F604ZPY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.205.226.94", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 526, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cfadbfe-dfea-4714-949d-95f0670c2bd4", "eventTime": "2019-05-04T16:39:26Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.205.226.94", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIABX5HC3VQ4F604ZPY", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c37346a-bdc3-4bbc-ad36-85f67b6265ae", "record_id": "flaws_cloudtrail:0000027:8c37346a-bdc3-4bbc-ad36-85f67b6265ae", "row_index": 27, "timestamp": "2019-05-04T16:41:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIABX5HC3VQ4F604ZPY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.205.226.94", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-8580"], "raw_record_size_bytes": 631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c37346a-bdc3-4bbc-ad36-85f67b6265ae", "eventTime": "2019-05-04T16:41:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.205.226.94", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIABX5HC3VQ4F604ZPY", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-8580"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8580"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbe2510d-9df0-4453-bcf6-068dd5caedb1", "record_id": "flaws_cloudtrail:0000028:dbe2510d-9df0-4453-bcf6-068dd5caedb1", "row_index": 28, "timestamp": "2019-05-04T16:42:05Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIABX5HC3VQ4F604ZPY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.205.226.94", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-8580-archive"], "raw_record_size_bytes": 647, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbe2510d-9df0-4453-bcf6-068dd5caedb1", "eventTime": "2019-05-04T16:42:05Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.205.226.94", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIABX5HC3VQ4F604ZPY", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-8580-archive"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8580-archive"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8820b67-6d34-4e70-a181-89f540b8d5de", "record_id": "flaws_cloudtrail:0000029:a8820b67-6d34-4e70-a181-89f540b8d5de", "row_index": 29, "timestamp": "2019-05-04T16:44:57Z", "event_type": "ListObjects", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIABX5HC3VQ4F604ZPY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.205.226.94", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-8580"], "raw_record_size_bytes": 651, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8820b67-6d34-4e70-a181-89f540b8d5de", "eventTime": "2019-05-04T16:44:57Z", "eventName": "ListObjects", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.205.226.94", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIABX5HC3VQ4F604ZPY", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-8580", "prefix": "customer/"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8580"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8449d139-6d92-45c8-be02-9d55cf76a384", "record_id": "flaws_cloudtrail:0000030:8449d139-6d92-45c8-be02-9d55cf76a384", "row_index": 30, "timestamp": "2019-05-04T16:47:30Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIABX5HC3VQ4F604ZPY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.205.226.94", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-8580"], "raw_record_size_bytes": 656, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8449d139-6d92-45c8-be02-9d55cf76a384", "eventTime": "2019-05-04T16:47:30Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.205.226.94", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIABX5HC3VQ4F604ZPY", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-8580", "key": "customer/04877.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8580"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aadef717-9d52-4b44-8c2b-72ab030caf26", "record_id": "flaws_cloudtrail:0000031:aadef717-9d52-4b44-8c2b-72ab030caf26", "row_index": 31, "timestamp": "2019-05-04T16:48:01Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIABX5HC3VQ4F604ZPY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.205.226.94", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-8580"], "raw_record_size_bytes": 656, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aadef717-9d52-4b44-8c2b-72ab030caf26", "eventTime": "2019-05-04T16:48:01Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.205.226.94", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIABX5HC3VQ4F604ZPY", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-8580", "key": "customer/05657.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8580"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "029245d5-de80-4ad9-94ea-b62bbc083854", "record_id": "flaws_cloudtrail:0000032:029245d5-de80-4ad9-94ea-b62bbc083854", "row_index": 32, "timestamp": "2019-05-04T16:48:39Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIABX5HC3VQ4F604ZPY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.205.226.94", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-8580"], "raw_record_size_bytes": 656, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "029245d5-de80-4ad9-94ea-b62bbc083854", "eventTime": "2019-05-04T16:48:39Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.205.226.94", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIABX5HC3VQ4F604ZPY", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-8580", "key": "customer/01088.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8580"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4844491f-85de-41a9-8994-aa0b75b58b20", "record_id": "flaws_cloudtrail:0000033:4844491f-85de-41a9-8994-aa0b75b58b20", "row_index": 33, "timestamp": "2019-05-04T16:49:01Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIABX5HC3VQ4F604ZPY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.205.226.94", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-8580"], "raw_record_size_bytes": 656, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4844491f-85de-41a9-8994-aa0b75b58b20", "eventTime": "2019-05-04T16:49:01Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.205.226.94", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIABX5HC3VQ4F604ZPY", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-8580", "key": "customer/00657.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8580"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3fda238-a911-400f-b63e-0169921bb336", "record_id": "flaws_cloudtrail:0000034:e3fda238-a911-400f-b63e-0169921bb336", "row_index": 34, "timestamp": "2019-05-04T16:49:49Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIABX5HC3VQ4F604ZPY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.205.226.94", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-8580"], "raw_record_size_bytes": 656, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3fda238-a911-400f-b63e-0169921bb336", "eventTime": "2019-05-04T16:49:49Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.205.226.94", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIABX5HC3VQ4F604ZPY", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-8580", "key": "customer/09226.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8580"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce5d29e2-df17-40ad-97c2-32d3d05b89c6", "record_id": "flaws_cloudtrail:0000035:ce5d29e2-df17-40ad-97c2-32d3d05b89c6", "row_index": 35, "timestamp": "2019-05-04T17:29:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce5d29e2-df17-40ad-97c2-32d3d05b89c6", "eventTime": "2019-05-04T17:29:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFMIMI44GEKJE0HGN", "expiration": "May 4, 2019 11:39:11 PM", "sessionToken": "AgoJb3JpZ2luX2VjEPL//////////wEaCXVzLXdlc3QtMiJGMEQCIAu3j/tW5kzWHBX/vYmVuOgVO4ObyR+ZxVrc5WrFt+VoAiAinnnb8W8Qjnr3H44iHKSjeZvB7Dt3GeQKPBvxG9FLkyrjAwjb//////////8BEAAaDDk3NTQyNjI2MjAyOSIMZ/OQty+2x24j9DhmKrcDBicaFkNNDJLkUahNV4iR5Cky4fytsXEWRtxJxPv1zCVYEMx4ytwzwHvCRfXBCsGCE6HIRSQL8WifZrVOF0tLC7GAgZMaPJ8pf1UOH24CAahs1T1FDRBdKaVk1e6UKSAskDCkTqTS6tmzsqNaxatsjemMGUcghEiA1UnE/7qoTMiqSEDVitehZgC1Sd410kI5gB6dgapEUbZXG/SZE/eoEF7lpVQVYFMZVvJpbjDv2WQ438vEEf4RYsfCBn+HdRXTn50iy3z9k8+Kl3FKAKpIB+gMs++6fNDkZuo6DS51+pgTRg5hNmoooa6bZeIYwbJJQ+XisPLxZiqGW+LjgvAY7Ng1ckxVOrb7XAeZEvCfU54qz1iR/76MTauqa8RY6pKw0XLny7IqPzGzzcm7awWhLLk5RLH0HbAX96ZThGDg3ytn/1c0fANKxOfUHDi2xm539AT5NbMYCjPftDxdQjkBDn+0+dVmaXOEd8KUlhMMS2UFRTmRIsWbV+78m5C2iQuJ6oTaEuNSWi9Rfp+y1g5XGkloZNbbR2j4HutrtfMb170ZSvURQdKj8GQrL+ObdzuOk4z79VSYKDD+l7fmBTq1AZYX9upi5AeiNVYHkJP8jzGVgakxzGInUBHtx4CZ1+prisOdzDOHpEAtWHSPZeAm3HDot63ezXmvukwBTJ1RwbhvrwQPOEKZXAOKixnGHURGZIkbTFrNAJxtfDkJoU1Gf+vNoK0mm4mao5v0/Lp4Bs0uA4vr93ezDjgfIVphg/g8LpjS1/V96v93ejlthSsdQAjDvma8KJq3Y0BBLYu0R3W041M/Hnnvc8MLWjm2zeIRhvzltks="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce5d29e2-df17-40ad-97c2-32d3d05b89c6", "record_id": "flaws_cloudtrail:0000036:ce5d29e2-df17-40ad-97c2-32d3d05b89c6", "row_index": 36, "timestamp": "2019-05-04T17:29:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce5d29e2-df17-40ad-97c2-32d3d05b89c6", "eventTime": "2019-05-04T17:29:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFMIMI44GEKJE0HGN", "expiration": "May 4, 2019 11:39:11 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b5780ed-42b7-4ee2-982f-de6fe02ab310", "record_id": "flaws_cloudtrail:0000037:5b5780ed-42b7-4ee2-982f-de6fe02ab310", "row_index": 37, "timestamp": "2019-05-04T18:18:26Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1932, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b5780ed-42b7-4ee2-982f-de6fe02ab310", "eventTime": "2019-05-04T18:18:26Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIARHDZ0KDFSVCX8ZAL", "expiration": "May 4, 2019 7:18:26 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b5780ed-42b7-4ee2-982f-de6fe02ab310", "record_id": "flaws_cloudtrail:0000038:5b5780ed-42b7-4ee2-982f-de6fe02ab310", "row_index": 38, "timestamp": "2019-05-04T18:18:26Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1932, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b5780ed-42b7-4ee2-982f-de6fe02ab310", "eventTime": "2019-05-04T18:18:26Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIARHDZ0KDFSVCX8ZAL", "expiration": "May 4, 2019 7:18:26 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1d58f4f-bfa0-4f6f-a78e-6d5b29f377bd", "record_id": "flaws_cloudtrail:0000039:b1d58f4f-bfa0-4f6f-a78e-6d5b29f377bd", "row_index": 39, "timestamp": "2019-05-04T18:29:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1d58f4f-bfa0-4f6f-a78e-6d5b29f377bd", "eventTime": "2019-05-04T18:29:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAL0DV6GE3M6A3WZZG", "expiration": "May 5, 2019 12:55:23 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1d58f4f-bfa0-4f6f-a78e-6d5b29f377bd", "record_id": "flaws_cloudtrail:0000040:b1d58f4f-bfa0-4f6f-a78e-6d5b29f377bd", "row_index": 40, "timestamp": "2019-05-04T18:29:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1d58f4f-bfa0-4f6f-a78e-6d5b29f377bd", "eventTime": "2019-05-04T18:29:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAL0DV6GE3M6A3WZZG", "expiration": "May 5, 2019 12:55:23 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94b9062e-bd5d-4400-bd80-9c400b6c4857", "record_id": "flaws_cloudtrail:0000041:94b9062e-bd5d-4400-bd80-9c400b6c4857", "row_index": 41, "timestamp": "2019-05-04T19:29:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94b9062e-bd5d-4400-bd80-9c400b6c4857", "eventTime": "2019-05-04T19:29:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIARHZVSZ6KWKG4EN1S", "expiration": "May 5, 2019 2:02:51 AM", "sessionToken": "AgoJb3JpZ2luX2VjEPT//////////wEaCXVzLXdlc3QtMiJIMEYCIQCFARPtKh0VfT9bAj9cXRPYVlkd04cnnv0gpyJWsFKa0AIhAMrYEe72h+yN/As4GX5VOZmjSVCslAiCJX6lMcY5vtOxKuMDCN3//////////wEQABoMOTc1NDI2MjYyMDI5Igwwk8dqp+TQRW6LYfwqtwOxHIneinD1oHLduy6/uA2+PqaV0wR+7uvUc9c6yYm6h0+k2iJE4qXBO+IQpbt0/FXV+Xyh61jFr2+oewAp+Fc1z6KDcYSPcaG31MaZ79gVGGRXE/iMDRMjNFtGBfulXjmj66Ogy0c6BB9wJRrcfajD0Fu54ynYUF5Chautjzmkyl5e+gIyi+NhZgUCb9X9bZhAqD5DQnCsiyl62sUKXkqxPZJpXBN4DznQjuZCxlDQ+qbE3ekjuxi6YJx+0D5FKalTdhWwsh5onjEYqZ53AmUSA5ho4lz8BnMLoKBmNNDl/i+oPm2yR6gI9kB4f8u4BdW/9Rrkd09YjKBPSkel/QAUhYM6oP/3fOIfO0uTV3vzVUOTq3qxk8xFH9QHuarHCua+5ja6kdx9Lpx/YmPS/qbhuunOKafe1xq6XCYoc8BWrq6/o/0ZNCQCuXeqWScgJpj8iBJImb1hIlV6+Sz4hlCJbjGdzY6Cx4+LNtvHg7sByeN+eqj/FyMQ4VT6/AXRZx7vAzYWnnKidTDhPY9E8IlGj7xnAqFwjBCTIZ1HsTWgrtW1jAAE+o4ruFKV0hRpAsReS6Es5HnHMJ/Qt+YFOrMBb6mmh7vpwQ98dSw7NYZYHs3m6y7meHw1kZLvbm84FC+N/NywX9tZcpkx07sSFbqfVXp8yk6QI2gWgNx4AYJszqtGtbkUHoIuVOfJm17fowCDWXDbjMgaWLPkpSHNJYdT1cEykeK+Ni8+q00XPIxTCyMsRG4LyruQIRX3HHyGI9auVo86EoxRjiMhYkTh714IUfjsmgPX8srLDoIzbnhVtaE9yypbqLsY2sFO6ig0ZR1kkNQ="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94b9062e-bd5d-4400-bd80-9c400b6c4857", "record_id": "flaws_cloudtrail:0000042:94b9062e-bd5d-4400-bd80-9c400b6c4857", "row_index": 42, "timestamp": "2019-05-04T19:29:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1894, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94b9062e-bd5d-4400-bd80-9c400b6c4857", "eventTime": "2019-05-04T19:29:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIARHZVSZ6KWKG4EN1S", "expiration": "May 5, 2019 2:02:51 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "747883cb9-a1ab-4aeb-8cbd-cdc88f81f172", "record_id": "flaws_cloudtrail:0000043:747883cb9-a1ab-4aeb-8cbd-cdc88f81f172", "row_index": 43, "timestamp": "2019-05-04T20:29:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1892, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "747883cb9-a1ab-4aeb-8cbd-cdc88f81f172", "eventTime": "2019-05-04T20:29:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALD49G7ZMOLTPL5NN", "expiration": "May 5, 2019 3:00:37 AM", "sessionToken": "AgoJb3JpZ2luX2VjEPX//////////wEaCXVzLXdlc3QtMiJIMEYCIQDYTsAwfLl+4rjQHfcAEVcZKEYNj6NxPwzeRCRtZg7mCAIhAN0G+DVlzdfvxVvqk+KmeRR2l7kR0jMXMbkK1+QXfDGUKuMDCN7//////////wEQABoMOTc1NDI2MjYyMDI5IgzgzB2s1pkNLzQ2CVwqtwMT/u1+PhxVvIEjxxQJK8LbwLRIKLPbV9SKBSx6NBgwdg+gwWEh2M9o2u2lV98mYXCTtCQggGysUALx27UMogtJJDxM5zbKxPyKTBCACrME9SdxRtqgqZjkPI8ZR/dsSwNFQj7KJMWG7FW93SVlM34WWDFljtvvtXUNVehdGPFBFzrCo6aGIWIDyN/IBdmpCp2GtYwpWU8xXugznfxgjtiAHNboJTG6y8zJZrW6iZJ5gl+PukoV9BKhODsYyNy1GYSa0GpxkUHdimBQPuRt+F3K4OaVout5fz+V1te6mgtXg3h6WVIJl1f39NskHkxGUypwabYv5W/EuQWsgB+E05unlV+FKuG3ik5B30cLKk3C2R/4Qh2GRqGKqPy37aw8N6ZY0Q1KPS+xN7z42ZVoU3pCmcqFHs1mCVlXl0t4Bqzdv8lhwSZJ9EI/n7mNTIS4xx85q1tMUrp9i0CdtqbDbKcNmKDoHGC7dh6mqxFflwwyB56MsUAdRiNbviciy3Zn98L/Y4dbdG9WHooZbb9aF8wrszkpYnOwyt6M3h0HLT3FH37jhKtKLkVFuA86ME8XfDbXhBXohLRwMK/st+YFOrMBgN3FPnPkk8f0XBfrTkWhz9jZS+nqyM+UvtVIFJnUaEBaJUNsTw9s6xHTl2KnxtIG77+QielEN98ESBzcra90pD1isi+F3BjyyYzTAXTgltLMwin3eg5EcdPyKDea8mZ+afJ+q9n45almpZg7Ak/TVSvfc5lGv9k8oNGgGU8QuAiBEQb4I31BiyVHcILtPhDZodmSTJ9LGFDUvMxrpNbY3yezx9A4vmlHkJSKMDUzaH17VqE="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "747883cb9-a1ab-4aeb-8cbd-cdc88f81f172", "record_id": "flaws_cloudtrail:0000044:747883cb9-a1ab-4aeb-8cbd-cdc88f81f172", "row_index": 44, "timestamp": "2019-05-04T20:29:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1892, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "747883cb9-a1ab-4aeb-8cbd-cdc88f81f172", "eventTime": "2019-05-04T20:29:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALD49G7ZMOLTPL5NN", "expiration": "May 5, 2019 3:00:37 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbddd5ed-dfde-4cb7-b240-936e1086b564", "record_id": "flaws_cloudtrail:0000045:cbddd5ed-dfde-4cb7-b240-936e1086b564", "row_index": 45, "timestamp": "2019-05-04T20:58:07Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.232.227.90", "user_agent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbddd5ed-dfde-4cb7-b240-936e1086b564", "eventTime": "2019-05-04T20:58:07Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.232.227.90", "userAgent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbddd5ed-dfde-4cb7-b240-936e1086b564", "record_id": "flaws_cloudtrail:0000046:cbddd5ed-dfde-4cb7-b240-936e1086b564", "row_index": 46, "timestamp": "2019-05-04T20:58:07Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.232.227.90", "user_agent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbddd5ed-dfde-4cb7-b240-936e1086b564", "eventTime": "2019-05-04T20:58:07Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.232.227.90", "userAgent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e9b389f-c0fe-433e-ba89-7b76bb64cfb7", "record_id": "flaws_cloudtrail:0000047:7e9b389f-c0fe-433e-ba89-7b76bb64cfb7", "row_index": 47, "timestamp": "2019-05-04T20:59:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.232.227.90", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e9b389f-c0fe-433e-ba89-7b76bb64cfb7", "eventTime": "2019-05-04T20:59:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.232.227.90", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e9b389f-c0fe-433e-ba89-7b76bb64cfb7", "record_id": "flaws_cloudtrail:0000048:7e9b389f-c0fe-433e-ba89-7b76bb64cfb7", "row_index": 48, "timestamp": "2019-05-04T20:59:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.232.227.90", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e9b389f-c0fe-433e-ba89-7b76bb64cfb7", "eventTime": "2019-05-04T20:59:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.232.227.90", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a234b15a-eeb0-44df-b25f-e577a1a670a9", "record_id": "flaws_cloudtrail:0000049:a234b15a-eeb0-44df-b25f-e577a1a670a9", "row_index": 49, "timestamp": "2019-05-04T21:00:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.232.227.90", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a234b15a-eeb0-44df-b25f-e577a1a670a9", "eventTime": "2019-05-04T21:00:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.232.227.90", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a234b15a-eeb0-44df-b25f-e577a1a670a9", "record_id": "flaws_cloudtrail:0000050:a234b15a-eeb0-44df-b25f-e577a1a670a9", "row_index": 50, "timestamp": "2019-05-04T21:00:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.232.227.90", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 921, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a234b15a-eeb0-44df-b25f-e577a1a670a9", "eventTime": "2019-05-04T21:00:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.232.227.90", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "awsRegion": "us-west-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3020ce82-6d55-4780-bd96-81e47f743951", "record_id": "flaws_cloudtrail:0000051:3020ce82-6d55-4780-bd96-81e47f743951", "row_index": 51, "timestamp": "2019-05-04T21:00:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.232.227.90", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3020ce82-6d55-4780-bd96-81e47f743951", "eventTime": "2019-05-04T21:00:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.232.227.90", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3020ce82-6d55-4780-bd96-81e47f743951", "record_id": "flaws_cloudtrail:0000052:3020ce82-6d55-4780-bd96-81e47f743951", "row_index": 52, "timestamp": "2019-05-04T21:00:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.232.227.90", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3020ce82-6d55-4780-bd96-81e47f743951", "eventTime": "2019-05-04T21:00:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.232.227.90", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "487bd34b-35d6-4c85-8b84-41115be8b2b0", "record_id": "flaws_cloudtrail:0000053:487bd34b-35d6-4c85-8b84-41115be8b2b0", "row_index": 53, "timestamp": "2019-05-04T21:16:13Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "[aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "487bd34b-35d6-4c85-8b84-41115be8b2b0", "eventTime": "2019-05-04T21:16:13Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "[aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "487bd34b-35d6-4c85-8b84-41115be8b2b0", "record_id": "flaws_cloudtrail:0000054:487bd34b-35d6-4c85-8b84-41115be8b2b0", "row_index": 54, "timestamp": "2019-05-04T21:16:13Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "[aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "487bd34b-35d6-4c85-8b84-41115be8b2b0", "eventTime": "2019-05-04T21:16:13Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "[aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "462e187f-0e9a-4908-83f1-40fa200d0d70", "record_id": "flaws_cloudtrail:0000055:462e187f-0e9a-4908-83f1-40fa200d0d70", "row_index": 55, "timestamp": "2019-05-04T21:18:16Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "462e187f-0e9a-4908-83f1-40fa200d0d70", "eventTime": "2019-05-04T21:18:16Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "462e187f-0e9a-4908-83f1-40fa200d0d70", "record_id": "flaws_cloudtrail:0000056:462e187f-0e9a-4908-83f1-40fa200d0d70", "row_index": 56, "timestamp": "2019-05-04T21:18:16Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "462e187f-0e9a-4908-83f1-40fa200d0d70", "eventTime": "2019-05-04T21:18:16Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db7f98c3-9734-4234-b202-6a3999f530211", "record_id": "flaws_cloudtrail:0000057:db7f98c3-9734-4234-b202-6a3999f530211", "row_index": 57, "timestamp": "2019-05-04T21:19:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db7f98c3-9734-4234-b202-6a3999f530211", "eventTime": "2019-05-04T21:19:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db7f98c3-9734-4234-b202-6a3999f530211", "record_id": "flaws_cloudtrail:0000058:db7f98c3-9734-4234-b202-6a3999f530211", "row_index": 58, "timestamp": "2019-05-04T21:19:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db7f98c3-9734-4234-b202-6a3999f530211", "eventTime": "2019-05-04T21:19:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffa09caf-18aa-4cd6-9d28-3879cba5a331", "record_id": "flaws_cloudtrail:0000059:ffa09caf-18aa-4cd6-9d28-3879cba5a331", "row_index": 59, "timestamp": "2019-05-04T21:28:35Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.232.227.90", "user_agent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffa09caf-18aa-4cd6-9d28-3879cba5a331", "eventTime": "2019-05-04T21:28:35Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.232.227.90", "userAgent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffa09caf-18aa-4cd6-9d28-3879cba5a331", "record_id": "flaws_cloudtrail:0000060:ffa09caf-18aa-4cd6-9d28-3879cba5a331", "row_index": 60, "timestamp": "2019-05-04T21:28:35Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.232.227.90", "user_agent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffa09caf-18aa-4cd6-9d28-3879cba5a331", "eventTime": "2019-05-04T21:28:35Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.232.227.90", "userAgent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e213d0c5-812e-4d07-818d-67676fd54c10", "record_id": "flaws_cloudtrail:0000061:e213d0c5-812e-4d07-818d-67676fd54c10", "row_index": 61, "timestamp": "2019-05-04T21:29:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1893, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e213d0c5-812e-4d07-818d-67676fd54c10", "eventTime": "2019-05-04T21:29:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAS73772J8K2OOVZLH", "expiration": "May 5, 2019 3:52:15 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e213d0c5-812e-4d07-818d-67676fd54c10", "record_id": "flaws_cloudtrail:0000062:e213d0c5-812e-4d07-818d-67676fd54c10", "row_index": 62, "timestamp": "2019-05-04T21:29:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1893, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e213d0c5-812e-4d07-818d-67676fd54c10", "eventTime": "2019-05-04T21:29:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAS73772J8K2OOVZLH", "expiration": "May 5, 2019 3:52:15 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63cc2ad8-8eb3-4998-bfb2-ae35970", "record_id": "flaws_cloudtrail:0000063:63cc2ad8-8eb3-4998-bfb2-ae35970", "row_index": 63, "timestamp": "2019-05-04T21:37:53Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.232.227.90", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63cc2ad8-8eb3-4998-bfb2-ae35970", "eventTime": "2019-05-04T21:37:53Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.232.227.90", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid REST API identifier specified 811596193553:811596193553", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "811596193553", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63cc2ad8-8eb3-4998-bfb2-ae35970", "record_id": "flaws_cloudtrail:0000064:63cc2ad8-8eb3-4998-bfb2-ae35970", "row_index": 64, "timestamp": "2019-05-04T21:37:53Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.232.227.90", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63cc2ad8-8eb3-4998-bfb2-ae35970", "eventTime": "2019-05-04T21:37:53Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.232.227.90", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid REST API identifier specified 811596193553:811596193553", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "811596193553", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6f050ea-583c-4cc8-95e5-19139d59e039", "record_id": "flaws_cloudtrail:0000065:b6f050ea-583c-4cc8-95e5-19139d59e039", "row_index": 65, "timestamp": "2019-05-04T21:38:17Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.232.227.90", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6f050ea-583c-4cc8-95e5-19139d59e039", "eventTime": "2019-05-04T21:38:17Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.232.227.90", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6f050ea-583c-4cc8-95e5-19139d59e039", "record_id": "flaws_cloudtrail:0000066:b6f050ea-583c-4cc8-95e5-19139d59e039", "row_index": 66, "timestamp": "2019-05-04T21:38:17Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.232.227.90", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6f050ea-583c-4cc8-95e5-19139d59e039", "eventTime": "2019-05-04T21:38:17Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.232.227.90", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.109-80.92.amzn1.x86_64 botocore/1.12.141", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a14fec0-6374-4edf-b31a-723c1470e19e", "record_id": "flaws_cloudtrail:0000067:9a14fec0-6374-4edf-b31a-723c1470e19e", "row_index": 67, "timestamp": "2019-05-04T21:39:20Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1628, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a14fec0-6374-4edf-b31a-723c1470e19e", "eventTime": "2019-05-04T21:39:20Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9N5AM8UG4WQ3HKQN", "expiration": "May 5, 2019 9:39:20 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d97acc3d-46e6-4504-8dba-021fb3ee4072", "record_id": "flaws_cloudtrail:0000068:d97acc3d-46e6-4504-8dba-021fb3ee4072", "row_index": 68, "timestamp": "2019-05-04T21:39:20Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1628, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d97acc3d-46e6-4504-8dba-021fb3ee4072", "eventTime": "2019-05-04T21:39:20Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIANCQZGN6A6CQSEQEN", "expiration": "May 5, 2019 9:39:20 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a823a50a-70b4-4fa0-9da9-411eeca3ebea", "record_id": "flaws_cloudtrail:0000069:a823a50a-70b4-4fa0-9da9-411eeca3ebea", "row_index": 69, "timestamp": "2019-05-04T21:39:20Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIANCQZGN6A6CQSEQEN", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "75.210.103.182", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a823a50a-70b4-4fa0-9da9-411eeca3ebea", "eventTime": "2019-05-04T21:39:20Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.210.103.182", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIANCQZGN6A6CQSEQEN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T21:39:20Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/05/04/[$LATEST]db1aea79a047c6d28da8c028c56a9a30"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a14fec0-6374-4edf-b31a-723c1470e19e", "record_id": "flaws_cloudtrail:0000070:9a14fec0-6374-4edf-b31a-723c1470e19e", "row_index": 70, "timestamp": "2019-05-04T21:39:20Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1628, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a14fec0-6374-4edf-b31a-723c1470e19e", "eventTime": "2019-05-04T21:39:20Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9N5AM8UG4WQ3HKQN", "expiration": "May 5, 2019 9:39:20 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d97acc3d-46e6-4504-8dba-021fb3ee4072", "record_id": "flaws_cloudtrail:0000071:d97acc3d-46e6-4504-8dba-021fb3ee4072", "row_index": 71, "timestamp": "2019-05-04T21:39:20Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1628, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d97acc3d-46e6-4504-8dba-021fb3ee4072", "eventTime": "2019-05-04T21:39:20Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIANCQZGN6A6CQSEQEN", "expiration": "May 5, 2019 9:39:20 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a823a50a-70b4-4fa0-9da9-411eeca3ebea", "record_id": "flaws_cloudtrail:0000072:a823a50a-70b4-4fa0-9da9-411eeca3ebea", "row_index": 72, "timestamp": "2019-05-04T21:39:20Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIANCQZGN6A6CQSEQEN", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "75.210.103.182", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a823a50a-70b4-4fa0-9da9-411eeca3ebea", "eventTime": "2019-05-04T21:39:20Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "75.210.103.182", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIANCQZGN6A6CQSEQEN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T21:39:20Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/05/04/[$LATEST]db1aea79a047c6d28da8c028c56a9a30"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d5b97b2-e2cd-4a08-a3ee-b5e363b82bf1", "record_id": "flaws_cloudtrail:0000073:0d5b97b2-e2cd-4a08-a3ee-b5e363b82bf1", "row_index": 73, "timestamp": "2019-05-04T21:58:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "[aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d5b97b2-e2cd-4a08-a3ee-b5e363b82bf1", "eventTime": "2019-05-04T21:58:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "[aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138]", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-east-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d5b97b2-e2cd-4a08-a3ee-b5e363b82bf1", "record_id": "flaws_cloudtrail:0000074:0d5b97b2-e2cd-4a08-a3ee-b5e363b82bf1", "row_index": 74, "timestamp": "2019-05-04T21:58:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "[aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d5b97b2-e2cd-4a08-a3ee-b5e363b82bf1", "eventTime": "2019-05-04T21:58:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "[aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138]", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-east-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca341c85-fbc7-417c-bdfc-3bdc1e23f0e9", "record_id": "flaws_cloudtrail:0000075:ca341c85-fbc7-417c-bdfc-3bdc1e23f0e9", "row_index": 75, "timestamp": "2019-05-04T21:59:32Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "98.251.234.254", "user_agent": "[aws-cli/1.16.140 Python/3.6.0 Windows/10 botocore/1.12.130]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca341c85-fbc7-417c-bdfc-3bdc1e23f0e9", "eventTime": "2019-05-04T21:59:32Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "98.251.234.254", "userAgent": "[aws-cli/1.16.140 Python/3.6.0 Windows/10 botocore/1.12.130]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca341c85-fbc7-417c-bdfc-3bdc1e23f0e9", "record_id": "flaws_cloudtrail:0000076:ca341c85-fbc7-417c-bdfc-3bdc1e23f0e9", "row_index": 76, "timestamp": "2019-05-04T21:59:32Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "98.251.234.254", "user_agent": "[aws-cli/1.16.140 Python/3.6.0 Windows/10 botocore/1.12.130]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca341c85-fbc7-417c-bdfc-3bdc1e23f0e9", "eventTime": "2019-05-04T21:59:32Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "98.251.234.254", "userAgent": "[aws-cli/1.16.140 Python/3.6.0 Windows/10 botocore/1.12.130]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38ba4831-b94f-4f52-b7b7-32b40344ce", "record_id": "flaws_cloudtrail:0000077:38ba4831-b94f-4f52-b7b7-32b40344ce", "row_index": 77, "timestamp": "2019-05-04T22:00:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38ba4831-b94f-4f52-b7b7-32b40344ce", "eventTime": "2019-05-04T22:00:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38ba4831-b94f-4f52-b7b7-32b40344ce", "record_id": "flaws_cloudtrail:0000078:38ba4831-b94f-4f52-b7b7-32b40344ce", "row_index": 78, "timestamp": "2019-05-04T22:00:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38ba4831-b94f-4f52-b7b7-32b40344ce", "eventTime": "2019-05-04T22:00:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbfbd8fa-b4f6-4109-be5a-af307b5a8c16", "record_id": "flaws_cloudtrail:0000079:fbfbd8fa-b4f6-4109-be5a-af307b5a8c16", "row_index": 79, "timestamp": "2019-05-04T22:08:51Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "98.251.234.254", "user_agent": "aws-cli/1.16.140 Python/3.6.0 Windows/10 botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbfbd8fa-b4f6-4109-be5a-af307b5a8c16", "eventTime": "2019-05-04T22:08:51Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "98.251.234.254", "userAgent": "aws-cli/1.16.140 Python/3.6.0 Windows/10 botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbfbd8fa-b4f6-4109-be5a-af307b5a8c16", "record_id": "flaws_cloudtrail:0000080:fbfbd8fa-b4f6-4109-be5a-af307b5a8c16", "row_index": 80, "timestamp": "2019-05-04T22:08:51Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "98.251.234.254", "user_agent": "aws-cli/1.16.140 Python/3.6.0 Windows/10 botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbfbd8fa-b4f6-4109-be5a-af307b5a8c16", "eventTime": "2019-05-04T22:08:51Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "98.251.234.254", "userAgent": "aws-cli/1.16.140 Python/3.6.0 Windows/10 botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f64d50d-abe5-46b3-b81a-456e0c273485", "record_id": "flaws_cloudtrail:0000081:3f64d50d-abe5-46b3-b81a-456e0c273485", "row_index": 81, "timestamp": "2019-05-04T22:09:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "98.251.234.254", "user_agent": "aws-cli/1.16.140 Python/3.6.0 Windows/10 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f64d50d-abe5-46b3-b81a-456e0c273485", "eventTime": "2019-05-04T22:09:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "98.251.234.254", "userAgent": "aws-cli/1.16.140 Python/3.6.0 Windows/10 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f64d50d-abe5-46b3-b81a-456e0c273485", "record_id": "flaws_cloudtrail:0000082:3f64d50d-abe5-46b3-b81a-456e0c273485", "row_index": 82, "timestamp": "2019-05-04T22:09:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "98.251.234.254", "user_agent": "aws-cli/1.16.140 Python/3.6.0 Windows/10 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f64d50d-abe5-46b3-b81a-456e0c273485", "eventTime": "2019-05-04T22:09:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "98.251.234.254", "userAgent": "aws-cli/1.16.140 Python/3.6.0 Windows/10 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dce9443c-0787-40f8-8bd6-335ed87e5add", "record_id": "flaws_cloudtrail:0000083:dce9443c-0787-40f8-8bd6-335ed87e5add", "row_index": 83, "timestamp": "2019-05-04T22:14:09Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.141 Python/3.7.3 Darwin/18.5.0 botocore/1.12.131", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dce9443c-0787-40f8-8bd6-335ed87e5add", "eventTime": "2019-05-04T22:14:09Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.141 Python/3.7.3 Darwin/18.5.0 botocore/1.12.131", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dce9443c-0787-40f8-8bd6-335ed87e5add", "record_id": "flaws_cloudtrail:0000084:dce9443c-0787-40f8-8bd6-335ed87e5add", "row_index": 84, "timestamp": "2019-05-04T22:14:09Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.141 Python/3.7.3 Darwin/18.5.0 botocore/1.12.131", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dce9443c-0787-40f8-8bd6-335ed87e5add", "eventTime": "2019-05-04T22:14:09Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.141 Python/3.7.3 Darwin/18.5.0 botocore/1.12.131", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a9619c1-fb14-4e06-9f60-662a4b98409f", "record_id": "flaws_cloudtrail:0000085:8a9619c1-fb14-4e06-9f60-662a4b98409f", "row_index": 85, "timestamp": "2019-05-04T22:14:18Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "[aws-cli/1.16.141 Python/3.7.3 Darwin/18.5.0 botocore/1.12.131]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a9619c1-fb14-4e06-9f60-662a4b98409f", "eventTime": "2019-05-04T22:14:18Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "[aws-cli/1.16.141 Python/3.7.3 Darwin/18.5.0 botocore/1.12.131]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a9619c1-fb14-4e06-9f60-662a4b98409f", "record_id": "flaws_cloudtrail:0000086:8a9619c1-fb14-4e06-9f60-662a4b98409f", "row_index": 86, "timestamp": "2019-05-04T22:14:18Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "[aws-cli/1.16.141 Python/3.7.3 Darwin/18.5.0 botocore/1.12.131]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a9619c1-fb14-4e06-9f60-662a4b98409f", "eventTime": "2019-05-04T22:14:18Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "[aws-cli/1.16.141 Python/3.7.3 Darwin/18.5.0 botocore/1.12.131]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61f6e2fd-9482-4c68-a549-e322d8cd53da", "record_id": "flaws_cloudtrail:0000087:61f6e2fd-9482-4c68-a549-e322d8cd53da", "row_index": 87, "timestamp": "2019-05-04T22:16:04Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "[aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61f6e2fd-9482-4c68-a549-e322d8cd53da", "eventTime": "2019-05-04T22:16:04Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "[aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61f6e2fd-9482-4c68-a549-e322d8cd53da", "record_id": "flaws_cloudtrail:0000088:61f6e2fd-9482-4c68-a549-e322d8cd53da", "row_index": 88, "timestamp": "2019-05-04T22:16:04Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "[aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61f6e2fd-9482-4c68-a549-e322d8cd53da", "eventTime": "2019-05-04T22:16:04Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "[aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0323f48f-3b35-4cb6-ad70-7f05f941f560", "record_id": "flaws_cloudtrail:0000089:0323f48f-3b35-4cb6-ad70-7f05f941f560", "row_index": 89, "timestamp": "2019-05-04T22:17:30Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0323f48f-3b35-4cb6-ad70-7f05f941f560", "eventTime": "2019-05-04T22:17:30Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0323f48f-3b35-4cb6-ad70-7f05f941f560", "record_id": "flaws_cloudtrail:0000090:0323f48f-3b35-4cb6-ad70-7f05f941f560", "row_index": 90, "timestamp": "2019-05-04T22:17:30Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0323f48f-3b35-4cb6-ad70-7f05f941f560", "eventTime": "2019-05-04T22:17:30Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eec2e29-be04-4204-ae07-6d843342d30f", "record_id": "flaws_cloudtrail:0000091:6eec2e29-be04-4204-ae07-6d843342d30f", "row_index": 91, "timestamp": "2019-05-04T22:17:40Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eec2e29-be04-4204-ae07-6d843342d30f", "eventTime": "2019-05-04T22:17:40Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eec2e29-be04-4204-ae07-6d843342d30f", "record_id": "flaws_cloudtrail:0000092:6eec2e29-be04-4204-ae07-6d843342d30f", "row_index": 92, "timestamp": "2019-05-04T22:17:40Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eec2e29-be04-4204-ae07-6d843342d30f", "eventTime": "2019-05-04T22:17:40Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fce762a-020a-4a6b-b775-0d552f477948b", "record_id": "flaws_cloudtrail:0000093:9fce762a-020a-4a6b-b775-0d552f477948b", "row_index": 93, "timestamp": "2019-05-04T22:17:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fce762a-020a-4a6b-b775-0d552f477948b", "eventTime": "2019-05-04T22:17:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fce762a-020a-4a6b-b775-0d552f477948b", "record_id": "flaws_cloudtrail:0000094:9fce762a-020a-4a6b-b775-0d552f477948b", "row_index": 94, "timestamp": "2019-05-04T22:17:51Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fce762a-020a-4a6b-b775-0d552f477948b", "eventTime": "2019-05-04T22:17:51Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "297103-9998-4cdb-bd8b-d0b1394b2051", "record_id": "flaws_cloudtrail:0000095:297103-9998-4cdb-bd8b-d0b1394b2051", "row_index": 95, "timestamp": "2019-05-04T22:18:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.141 Python/3.7.3 Darwin/18.5.0 botocore/1.12.131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "297103-9998-4cdb-bd8b-d0b1394b2051", "eventTime": "2019-05-04T22:18:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.141 Python/3.7.3 Darwin/18.5.0 botocore/1.12.131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "297103-9998-4cdb-bd8b-d0b1394b2051", "record_id": "flaws_cloudtrail:0000096:297103-9998-4cdb-bd8b-d0b1394b2051", "row_index": 96, "timestamp": "2019-05-04T22:18:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.141 Python/3.7.3 Darwin/18.5.0 botocore/1.12.131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "297103-9998-4cdb-bd8b-d0b1394b2051", "eventTime": "2019-05-04T22:18:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.141 Python/3.7.3 Darwin/18.5.0 botocore/1.12.131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc17008-d5ca-4cf8-a55f-84ac1a91aa4a", "record_id": "flaws_cloudtrail:0000097:cc17008-d5ca-4cf8-a55f-84ac1a91aa4a", "row_index": 97, "timestamp": "2019-05-04T22:21:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc17008-d5ca-4cf8-a55f-84ac1a91aa4a", "eventTime": "2019-05-04T22:21:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc17008-d5ca-4cf8-a55f-84ac1a91aa4a", "record_id": "flaws_cloudtrail:0000098:cc17008-d5ca-4cf8-a55f-84ac1a91aa4a", "row_index": 98, "timestamp": "2019-05-04T22:21:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc17008-d5ca-4cf8-a55f-84ac1a91aa4a", "eventTime": "2019-05-04T22:21:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.6.0 Windows/10 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d888b06e-053e-4e1e-82a3-f414962fef184", "record_id": "flaws_cloudtrail:0000099:d888b06e-053e-4e1e-82a3-f414962fef184", "row_index": 99, "timestamp": "2019-05-04T22:25:31Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d888b06e-053e-4e1e-82a3-f414962fef184", "eventTime": "2019-05-04T22:25:31Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d888b06e-053e-4e1e-82a3-f414962fef184", "record_id": "flaws_cloudtrail:0000100:d888b06e-053e-4e1e-82a3-f414962fef184", "row_index": 100, "timestamp": "2019-05-04T22:25:31Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d888b06e-053e-4e1e-82a3-f414962fef184", "eventTime": "2019-05-04T22:25:31Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "740d9dbd-d3cc-4a7f-a939-5b29eb697b73", "record_id": "flaws_cloudtrail:0000101:740d9dbd-d3cc-4a7f-a939-5b29eb697b73", "row_index": 101, "timestamp": "2019-05-04T22:25:37Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "740d9dbd-d3cc-4a7f-a939-5b29eb697b73", "eventTime": "2019-05-04T22:25:37Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "740d9dbd-d3cc-4a7f-a939-5b29eb697b73", "record_id": "flaws_cloudtrail:0000102:740d9dbd-d3cc-4a7f-a939-5b29eb697b73", "row_index": 102, "timestamp": "2019-05-04T22:25:37Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "740d9dbd-d3cc-4a7f-a939-5b29eb697b73", "eventTime": "2019-05-04T22:25:37Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "393057b6-4c21-4619-9b04-24b42378c41f", "record_id": "flaws_cloudtrail:0000103:393057b6-4c21-4619-9b04-24b42378c41f", "row_index": 103, "timestamp": "2019-05-04T22:25:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "[aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "393057b6-4c21-4619-9b04-24b42378c41f", "eventTime": "2019-05-04T22:25:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "[aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "393057b6-4c21-4619-9b04-24b42378c41f", "record_id": "flaws_cloudtrail:0000104:393057b6-4c21-4619-9b04-24b42378c41f", "row_index": 104, "timestamp": "2019-05-04T22:25:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "[aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "393057b6-4c21-4619-9b04-24b42378c41f", "eventTime": "2019-05-04T22:25:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "[aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5468d8ac-3e1d-40eb-81f7-d8bf2a5456fb", "record_id": "flaws_cloudtrail:0000105:5468d8ac-3e1d-40eb-81f7-d8bf2a5456fb", "row_index": 105, "timestamp": "2019-05-04T22:27:26Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5468d8ac-3e1d-40eb-81f7-d8bf2a5456fb", "eventTime": "2019-05-04T22:27:26Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5468d8ac-3e1d-40eb-81f7-d8bf2a5456fb", "record_id": "flaws_cloudtrail:0000106:5468d8ac-3e1d-40eb-81f7-d8bf2a5456fb", "row_index": 106, "timestamp": "2019-05-04T22:27:26Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5468d8ac-3e1d-40eb-81f7-d8bf2a5456fb", "eventTime": "2019-05-04T22:27:26Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79a8b007-1f5e-4ef8-9fea-60c58eb5f759", "record_id": "flaws_cloudtrail:0000107:79a8b007-1f5e-4ef8-9fea-60c58eb5f759", "row_index": 107, "timestamp": "2019-05-04T22:27:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79a8b007-1f5e-4ef8-9fea-60c58eb5f759", "eventTime": "2019-05-04T22:27:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79a8b007-1f5e-4ef8-9fea-60c58eb5f759", "record_id": "flaws_cloudtrail:0000108:79a8b007-1f5e-4ef8-9fea-60c58eb5f759", "row_index": 108, "timestamp": "2019-05-04T22:27:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79a8b007-1f5e-4ef8-9fea-60c58eb5f759", "eventTime": "2019-05-04T22:27:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c6fa902-be96-4fdc-88bd-e0d30c0b83e1", "record_id": "flaws_cloudtrail:0000109:5c6fa902-be96-4fdc-88bd-e0d30c0b83e1", "row_index": 109, "timestamp": "2019-05-04T22:28:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c6fa902-be96-4fdc-88bd-e0d30c0b83e1", "eventTime": "2019-05-04T22:28:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c6fa902-be96-4fdc-88bd-e0d30c0b83e1", "record_id": "flaws_cloudtrail:0000110:5c6fa902-be96-4fdc-88bd-e0d30c0b83e1", "row_index": 110, "timestamp": "2019-05-04T22:28:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c6fa902-be96-4fdc-88bd-e0d30c0b83e1", "eventTime": "2019-05-04T22:28:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dab24eff-4529-47b4-82b4-e1a5e2e9bab4", "record_id": "flaws_cloudtrail:0000111:dab24eff-4529-47b4-82b4-e1a5e2e9bab4", "row_index": 111, "timestamp": "2019-05-04T22:28:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dab24eff-4529-47b4-82b4-e1a5e2e9bab4", "eventTime": "2019-05-04T22:28:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIybkprMUhlRXJGbENjWVdEV2NDcmNZWU5BY2RPTnkzR0hPVjJyNVd1a2NyTEFyWjV1blZ1MFdmMjBvL2pqVlMrdHZRSVhQSVozZzhkclQ0aDd0UFVkMnNaakN1VkdQclBSNVU1ZlBRR0plRUloaHN5S3k2dWpHM1RtcTdZRXJKU0oxNFNvQ29YSVdvN3NJVWFRTHEzQkJkVkVYMFZRd2NITExSczZJZGVyYldKWjBraVRyeGx2MVMra2pqRUFQRU0wTWVNdTF4WkIzbGhjdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dab24eff-4529-47b4-82b4-e1a5e2e9bab4", "record_id": "flaws_cloudtrail:0000112:dab24eff-4529-47b4-82b4-e1a5e2e9bab4", "row_index": 112, "timestamp": "2019-05-04T22:28:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dab24eff-4529-47b4-82b4-e1a5e2e9bab4", "eventTime": "2019-05-04T22:28:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIybkprMUhlRXJGbENjWVdEV2NDcmNZWU5BY2RPTnkzR0hPVjJyNVd1a2NyTEFyWjV1blZ1MFdmMjBvL2pqVlMrdHZRSVhQSVozZzhkclQ0aDd0UFVkMnNaakN1VkdQclBSNVU1ZlBRR0plRUloaHN5S3k2dWpHM1RtcTdZRXJKU0oxNFNvQ29YSVdvN3NJVWFRTHEzQkJkVkVYMFZRd2NITExSczZJZGVyYldKWjBraVRyeGx2MVMra2pqRUFQRU0wTWVNdTF4WkIzbGhjdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a8f4e1f-1f18-46ed-9cff-e26eda3dbd67", "record_id": "flaws_cloudtrail:0000113:6a8f4e1f-1f18-46ed-9cff-e26eda3dbd67", "row_index": 113, "timestamp": "2019-05-04T22:28:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a8f4e1f-1f18-46ed-9cff-e26eda3dbd67", "eventTime": "2019-05-04T22:28:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmM0YxRUorcHdwOUM4clkwSExnSVFybGdGdUVpWWR6LzQyU0ZEMllqQ01MTlRwUDBoSE1NR3V2aVZBRkVyYU5XN2NlRVVTWkVTTUtueDZRRldRQTB3MXN1ZjF6UHVKbDhpSkRBZ2tTNTlTVVUwYlk1NWVZRUo3MHgyL0pUa0REeHk0ZCt2Uk1lbGUxNjRrZEEyblBFTnRySmhhM3hCUG43T0ZhMjNhMEtESGVFcXJSekFFZnlVZUtWTGNwQUlHeDFnQk9ib1lwYVB1ZmhkZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a8f4e1f-1f18-46ed-9cff-e26eda3dbd67", "record_id": "flaws_cloudtrail:0000114:6a8f4e1f-1f18-46ed-9cff-e26eda3dbd67", "row_index": 114, "timestamp": "2019-05-04T22:28:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a8f4e1f-1f18-46ed-9cff-e26eda3dbd67", "eventTime": "2019-05-04T22:28:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmM0YxRUorcHdwOUM4clkwSExnSVFybGdGdUVpWWR6LzQyU0ZEMllqQ01MTlRwUDBoSE1NR3V2aVZBRkVyYU5XN2NlRVVTWkVTTUtueDZRRldRQTB3MXN1ZjF6UHVKbDhpSkRBZ2tTNTlTVVUwYlk1NWVZRUo3MHgyL0pUa0REeHk0ZCt2Uk1lbGUxNjRrZEEyblBFTnRySmhhM3hCUG43T0ZhMjNhMEtESGVFcXJSekFFZnlVZUtWTGNwQUlHeDFnQk9ib1lwYVB1ZmhkZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c0118c4-5f59-4ea6-aeec-0a203e31dedd", "record_id": "flaws_cloudtrail:0000115:7c0118c4-5f59-4ea6-aeec-0a203e31dedd", "row_index": 115, "timestamp": "2019-05-04T22:28:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c0118c4-5f59-4ea6-aeec-0a203e31dedd", "eventTime": "2019-05-04T22:28:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1QWN4L2FoQm1PVTcwc3VOcFEzUldIdDZBaGFIai91anJNQm5YRzdBZjE2cHIyUlZkd1gxRG1Jck5zejFwaGpPdFFxekpYMDltMVFLOXZvODJXelREV1lGUzVUVm81N1Z1WkpyLytPanFnQUNBTmN3cjBQNS9vYXFubDBIaU9uYzV6V015dldsbE8vWm9RMXdLK1U1cDREeWx1MWt3dkk3NjNDQm01ZlhOZmVKYysxT1RESVVCVUhoODFsOWlxZXRTR1FXY1JVMmZnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c0118c4-5f59-4ea6-aeec-0a203e31dedd", "record_id": "flaws_cloudtrail:0000116:7c0118c4-5f59-4ea6-aeec-0a203e31dedd", "row_index": 116, "timestamp": "2019-05-04T22:28:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c0118c4-5f59-4ea6-aeec-0a203e31dedd", "eventTime": "2019-05-04T22:28:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1QWN4L2FoQm1PVTcwc3VOcFEzUldIdDZBaGFIai91anJNQm5YRzdBZjE2cHIyUlZkd1gxRG1Jck5zejFwaGpPdFFxekpYMDltMVFLOXZvODJXelREV1lGUzVUVm81N1Z1WkpyLytPanFnQUNBTmN3cjBQNS9vYXFubDBIaU9uYzV6V015dldsbE8vWm9RMXdLK1U1cDREeWx1MWt3dkk3NjNDQm01ZlhOZmVKYysxT1RESVVCVUhoODFsOWlxZXRTR1FXY1JVMmZnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fa3e2d5-e184-488f-928a-70d0abe07826", "record_id": "flaws_cloudtrail:0000117:3fa3e2d5-e184-488f-928a-70d0abe07826", "row_index": 117, "timestamp": "2019-05-04T22:28:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fa3e2d5-e184-488f-928a-70d0abe07826", "eventTime": "2019-05-04T22:28:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNL00vWlF3UjRDbnFYZ2s3THdDeVJuUCtpdnBkc3JUREQvZ0hQSW9BdDU2bkplRldjZEMwZStHVDhvdFhDNE1XeGtQS3Q3K2F2Yzc1R3ZoQUM1SmhkOXJxNnRWM3JkczdRSjdkZCtFbHdpaSt6Sk1jc0haYUZURHdQb2FoWGNZMDNQVW1pMnhmcHI1SjNOc2xvS0wwNVpxeW1KampEWlJWM2puZmowQUdqbGpDeHUrUldYbndzeDZHTzRRbit6K0JIajZZQ2w4b2hzYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fa3e2d5-e184-488f-928a-70d0abe07826", "record_id": "flaws_cloudtrail:0000118:3fa3e2d5-e184-488f-928a-70d0abe07826", "row_index": 118, "timestamp": "2019-05-04T22:28:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fa3e2d5-e184-488f-928a-70d0abe07826", "eventTime": "2019-05-04T22:28:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNL00vWlF3UjRDbnFYZ2s3THdDeVJuUCtpdnBkc3JUREQvZ0hQSW9BdDU2bkplRldjZEMwZStHVDhvdFhDNE1XeGtQS3Q3K2F2Yzc1R3ZoQUM1SmhkOXJxNnRWM3JkczdRSjdkZCtFbHdpaSt6Sk1jc0haYUZURHdQb2FoWGNZMDNQVW1pMnhmcHI1SjNOc2xvS0wwNVpxeW1KampEWlJWM2puZmowQUdqbGpDeHUrUldYbndzeDZHTzRRbit6K0JIajZZQ2w4b2hzYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d20a0b17-f0f2-4bff-9531-81c5a189bd1c", "record_id": "flaws_cloudtrail:0000119:d20a0b17-f0f2-4bff-9531-81c5a189bd1c", "row_index": 119, "timestamp": "2019-05-04T22:28:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d20a0b17-f0f2-4bff-9531-81c5a189bd1c", "eventTime": "2019-05-04T22:28:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiL2ZwTWVseStuQmlxWWFXNVgzbFRmQWxBTXpTcWpnNDNEVG10Ynp5S1lGSDF5ZVVKaEwxWUJkS20vU05KWG9NSGNKbTB6WWRWTGVpRGhBR2paZXdOUnBubzdReUN1UXE1L0plM1VqQzFoWlJsUjN3cGZpUHFoYmZzRzFud1dkK29JMHBrdC9tNXRLMTBKUmUyZ01JQlVSY1F2TFVudkxIQTFqa0ZuaVhXa0luOUNaUUNoQWNRT3BZTk1seks5OWNybllkeVMwQXhnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d20a0b17-f0f2-4bff-9531-81c5a189bd1c", "record_id": "flaws_cloudtrail:0000120:d20a0b17-f0f2-4bff-9531-81c5a189bd1c", "row_index": 120, "timestamp": "2019-05-04T22:28:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d20a0b17-f0f2-4bff-9531-81c5a189bd1c", "eventTime": "2019-05-04T22:28:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiL2ZwTWVseStuQmlxWWFXNVgzbFRmQWxBTXpTcWpnNDNEVG10Ynp5S1lGSDF5ZVVKaEwxWUJkS20vU05KWG9NSGNKbTB6WWRWTGVpRGhBR2paZXdOUnBubzdReUN1UXE1L0plM1VqQzFoWlJsUjN3cGZpUHFoYmZzRzFud1dkK29JMHBrdC9tNXRLMTBKUmUyZ01JQlVSY1F2TFVudkxIQTFqa0ZuaVhXa0luOUNaUUNoQWNRT3BZTk1seks5OWNybllkeVMwQXhnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf4ee1c9-1a21-4a31-b2f4-f25976e88", "record_id": "flaws_cloudtrail:0000121:bf4ee1c9-1a21-4a31-b2f4-f25976e88", "row_index": 121, "timestamp": "2019-05-04T22:28:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf4ee1c9-1a21-4a31-b2f4-f25976e88", "eventTime": "2019-05-04T22:28:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYOWN3aTVYMTZOTVBwRFdxVTdoaGY0Z0VGcitERUh6bEMyNHRDd3I1d0l3WmJFYWVBeVVFaHZpSmRLUFVBcFlGWURYT0kwOWc2L0dKYUZwVHdGb0Ywa1AzaEp0VmtxdXJ5MW5pYm5tRHFWMmxQekd6NHI5Q0Myb0tlUHkvcmYzUi9TUHZlWHY5UTFsTld5WjZ1S0oyZnN4SmcwOUFWY0s4RThvb004eDg2a3JzOFhSQzY5ZjBjSk5URHBwVFRKeVVLZkVRaWwzMlFHWFBZdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf4ee1c9-1a21-4a31-b2f4-f25976e88", "record_id": "flaws_cloudtrail:0000122:bf4ee1c9-1a21-4a31-b2f4-f25976e88", "row_index": 122, "timestamp": "2019-05-04T22:28:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf4ee1c9-1a21-4a31-b2f4-f25976e88", "eventTime": "2019-05-04T22:28:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYOWN3aTVYMTZOTVBwRFdxVTdoaGY0Z0VGcitERUh6bEMyNHRDd3I1d0l3WmJFYWVBeVVFaHZpSmRLUFVBcFlGWURYT0kwOWc2L0dKYUZwVHdGb0Ywa1AzaEp0VmtxdXJ5MW5pYm5tRHFWMmxQekd6NHI5Q0Myb0tlUHkvcmYzUi9TUHZlWHY5UTFsTld5WjZ1S0oyZnN4SmcwOUFWY0s4RThvb004eDg2a3JzOFhSQzY5ZjBjSk5URHBwVFRKeVVLZkVRaWwzMlFHWFBZdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfb7b63e-9334-43ff-8ccf-b116a7de4dda", "record_id": "flaws_cloudtrail:0000123:dfb7b63e-9334-43ff-8ccf-b116a7de4dda", "row_index": 123, "timestamp": "2019-05-04T22:28:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfb7b63e-9334-43ff-8ccf-b116a7de4dda", "eventTime": "2019-05-04T22:28:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZdGlRNVhKYnIyRmUyVzJ5VGtnakQ4VWhxTk5rd2RIQW9aM004d1pZSngwUFNQa1o4S1BqRW5uRTFFY3FzMk5vZ3VUV2pYaFVNN2RRRXR5WlVYSGpKYlBlZGhndVhnS3dMMnhISjhMTk9Kbmh3UE9KNllqaUZHQnlnTUpVZk0xc0NDaXlqWTVoRUdxNzdaQlkyZjYzTHJPYisxZjRnbW9vZ1htYmtYSVhDNGNkZ1B4bnNlYzNrKzZQYy9oNlRzcFNwNnZnM2RmeFhzbEJJZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfb7b63e-9334-43ff-8ccf-b116a7de4dda", "record_id": "flaws_cloudtrail:0000124:dfb7b63e-9334-43ff-8ccf-b116a7de4dda", "row_index": 124, "timestamp": "2019-05-04T22:28:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfb7b63e-9334-43ff-8ccf-b116a7de4dda", "eventTime": "2019-05-04T22:28:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZdGlRNVhKYnIyRmUyVzJ5VGtnakQ4VWhxTk5rd2RIQW9aM004d1pZSngwUFNQa1o4S1BqRW5uRTFFY3FzMk5vZ3VUV2pYaFVNN2RRRXR5WlVYSGpKYlBlZGhndVhnS3dMMnhISjhMTk9Kbmh3UE9KNllqaUZHQnlnTUpVZk0xc0NDaXlqWTVoRUdxNzdaQlkyZjYzTHJPYisxZjRnbW9vZ1htYmtYSVhDNGNkZ1B4bnNlYzNrKzZQYy9oNlRzcFNwNnZnM2RmeFhzbEJJZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9c827a8-32a0-4444-99e7-df61dc6fcdb6", "record_id": "flaws_cloudtrail:0000125:f9c827a8-32a0-4444-99e7-df61dc6fcdb6", "row_index": 125, "timestamp": "2019-05-04T22:28:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9c827a8-32a0-4444-99e7-df61dc6fcdb6", "eventTime": "2019-05-04T22:28:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0TnpPaU5mcFJjSmJlY3JYVitTTTk1SklxTGI0UGhoZnFHMjFMeVpZK1RrcnlUUldNRU5DMXRKV1VaMlZMQ0NsbkduZ016dEY3Y0pFa0RQY0d0dE5kejBCWGNtdzcxYlVtcXcrY3krcVd6dVp3QkFMTE8zVFFhQndnTisxc21EeTFnZUdBZDNQaGNGYmVjYWxwS0JvTDFSK2NEbUxmSVFzSzY1TzRlTi9MSHNxRlhvaWs5Z1NFWkhmYnUxdzNIVitmSHRDOUN0K2FMaFRLQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9c827a8-32a0-4444-99e7-df61dc6fcdb6", "record_id": "flaws_cloudtrail:0000126:f9c827a8-32a0-4444-99e7-df61dc6fcdb6", "row_index": 126, "timestamp": "2019-05-04T22:28:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9c827a8-32a0-4444-99e7-df61dc6fcdb6", "eventTime": "2019-05-04T22:28:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0TnpPaU5mcFJjSmJlY3JYVitTTTk1SklxTGI0UGhoZnFHMjFMeVpZK1RrcnlUUldNRU5DMXRKV1VaMlZMQ0NsbkduZ016dEY3Y0pFa0RQY0d0dE5kejBCWGNtdzcxYlVtcXcrY3krcVd6dVp3QkFMTE8zVFFhQndnTisxc21EeTFnZUdBZDNQaGNGYmVjYWxwS0JvTDFSK2NEbUxmSVFzSzY1TzRlTi9MSHNxRlhvaWs5Z1NFWkhmYnUxdzNIVitmSHRDOUN0K2FMaFRLQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5a8a31e-1ecb-40be-ae53-2c225799e8aed", "record_id": "flaws_cloudtrail:0000127:d5a8a31e-1ecb-40be-ae53-2c225799e8aed", "row_index": 127, "timestamp": "2019-05-04T22:28:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5a8a31e-1ecb-40be-ae53-2c225799e8aed", "eventTime": "2019-05-04T22:28:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYczZGaWZsbFVvaHNhTG5PMlo5ekZ3UjZrbmVrY2Q4MVByM3IvY2p1OFh2UTFOQWUzQ1lLUHQ5OTB1ODFxanFhVFVWaXlXcXduVFlCdHZrTkpEVXNoWjdpZHRlSXZWbDlzMy9wYWdNTUdRb2pTTS80UEF3Rzh4UTRXaG0xNlNqTFJFOStON21ZdVN1ejRhZE5NZHorelV1UEk5bHM3VUllWUVLUWFvUzFLeFVzN0hnRWFxZTVpRVhLVFlrSnd3YjBzcnR2bUFPMVNDR1ZwUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5a8a31e-1ecb-40be-ae53-2c225799e8aed", "record_id": "flaws_cloudtrail:0000128:d5a8a31e-1ecb-40be-ae53-2c225799e8aed", "row_index": 128, "timestamp": "2019-05-04T22:28:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5a8a31e-1ecb-40be-ae53-2c225799e8aed", "eventTime": "2019-05-04T22:28:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYczZGaWZsbFVvaHNhTG5PMlo5ekZ3UjZrbmVrY2Q4MVByM3IvY2p1OFh2UTFOQWUzQ1lLUHQ5OTB1ODFxanFhVFVWaXlXcXduVFlCdHZrTkpEVXNoWjdpZHRlSXZWbDlzMy9wYWdNTUdRb2pTTS80UEF3Rzh4UTRXaG0xNlNqTFJFOStON21ZdVN1ejRhZE5NZHorelV1UEk5bHM3VUllWUVLUWFvUzFLeFVzN0hnRWFxZTVpRVhLVFlrSnd3YjBzcnR2bUFPMVNDR1ZwUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d532f0d5-b7d9-4894-be1d-f8a2320f9dba", "record_id": "flaws_cloudtrail:0000129:d532f0d5-b7d9-4894-be1d-f8a2320f9dba", "row_index": 129, "timestamp": "2019-05-04T22:28:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d532f0d5-b7d9-4894-be1d-f8a2320f9dba", "eventTime": "2019-05-04T22:28:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEMnYrcnBaOVVqU3JjUncydE1XNC83TzdKRDdKY0hpUjY0WWpSUklBQTlHMmFBREo5cG9rM0ZPKyt1aWR3REtSd2hBMVZwNE53ZENtcENCbm4xQ2M2My9seFh1K2RmQ3lvdytRL0prT0VxKzZmVW5RYXBlQ1lGMmNFejQ1UlBrang4Y05nWXJoUE1YdjcyK211eHFaL3d4SGt5cVZCckdCNFd3U1pxWjl2YmlWYlR1VFVmUDN6dC96MjdKYUc1VC9FTmE4SCtieWpIQkowZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d532f0d5-b7d9-4894-be1d-f8a2320f9dba", "record_id": "flaws_cloudtrail:0000130:d532f0d5-b7d9-4894-be1d-f8a2320f9dba", "row_index": 130, "timestamp": "2019-05-04T22:28:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d532f0d5-b7d9-4894-be1d-f8a2320f9dba", "eventTime": "2019-05-04T22:28:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEMnYrcnBaOVVqU3JjUncydE1XNC83TzdKRDdKY0hpUjY0WWpSUklBQTlHMmFBREo5cG9rM0ZPKyt1aWR3REtSd2hBMVZwNE53ZENtcENCbm4xQ2M2My9seFh1K2RmQ3lvdytRL0prT0VxKzZmVW5RYXBlQ1lGMmNFejQ1UlBrang4Y05nWXJoUE1YdjcyK211eHFaL3d4SGt5cVZCckdCNFd3U1pxWjl2YmlWYlR1VFVmUDN6dC96MjdKYUc1VC9FTmE4SCtieWpIQkowZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b38588de-9888-4c24-947f-580afddb5b89", "record_id": "flaws_cloudtrail:0000131:b38588de-9888-4c24-947f-580afddb5b89", "row_index": 131, "timestamp": "2019-05-04T22:28:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b38588de-9888-4c24-947f-580afddb5b89", "eventTime": "2019-05-04T22:28:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIM0ZnWHk1a3BsZkZva3R4OVJwQXZ4VEFxa0JsMERWZVZlQkxLUDQxeWo4R2dLMGNwRWFvU0JLMHluZEZnSGpkUlNCWHVqS1FMdHRuTkVqTi9FaUlGVC9EMkxZR0J3MHFqNW9WQ2pObVpXQzBlOHF3VlA1Wlg2amltTUNaK01QMW9aTEYzaHZWQ0trZmRLTnNCb0JBTEZuQkR4Z2VBT25kTURLOExlMnpHQzkwR3NrQnlVVlMwa1ZNazA5aXYxc3JqOXBSWVZ2cGJpM0tqUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b38588de-9888-4c24-947f-580afddb5b89", "record_id": "flaws_cloudtrail:0000132:b38588de-9888-4c24-947f-580afddb5b89", "row_index": 132, "timestamp": "2019-05-04T22:28:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b38588de-9888-4c24-947f-580afddb5b89", "eventTime": "2019-05-04T22:28:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIM0ZnWHk1a3BsZkZva3R4OVJwQXZ4VEFxa0JsMERWZVZlQkxLUDQxeWo4R2dLMGNwRWFvU0JLMHluZEZnSGpkUlNCWHVqS1FMdHRuTkVqTi9FaUlGVC9EMkxZR0J3MHFqNW9WQ2pObVpXQzBlOHF3VlA1Wlg2amltTUNaK01QMW9aTEYzaHZWQ0trZmRLTnNCb0JBTEZuQkR4Z2VBT25kTURLOExlMnpHQzkwR3NrQnlVVlMwa1ZNazA5aXYxc3JqOXBSWVZ2cGJpM0tqUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f38460-37d3-4924-9b00-e59e9622c8b0", "record_id": "flaws_cloudtrail:0000133:f38460-37d3-4924-9b00-e59e9622c8b0", "row_index": 133, "timestamp": "2019-05-04T22:28:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f38460-37d3-4924-9b00-e59e9622c8b0", "eventTime": "2019-05-04T22:28:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhOHFhWG5wZU5oOWpjLzRLWWM0SVVxcWU0SC9ldjFLalQ2UzZESG00T1ZtS21DQmVZR0d2TFRTN0JVd29vcXNZelFPa0NIcXNzTG55ZUxqNmV2a1NwZFp6QlJoZ2xscm5tRkpKd1cyS0M1RTlid1ZOa1JCVUFNVjRxdTBDeFFWZjJITGR6VTBYOWx4RTJhOW95cFhKWEo0YnphYldBOEx0d0cyQ0J5bXJnRUxXQ3JmZmxkaDU3cm5ybEM3ZVhKUzdidkxjcFVualZ0OD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12b65924-8e9b-44c0-a5af-ac33e7c409d2", "record_id": "flaws_cloudtrail:0000134:12b65924-8e9b-44c0-a5af-ac33e7c409d2", "row_index": 134, "timestamp": "2019-05-04T22:28:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12b65924-8e9b-44c0-a5af-ac33e7c409d2", "eventTime": "2019-05-04T22:28:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEV1MzenNJUmJlMUwxbkxMbnRQV0Y5bTJKUzNhQkFhZFJRWnBoM3dyU2NiNXVEcjExSW9NSERzaDVjOEE2aW5hc0U4cU90cHdtRzFseDJTbXdXVDg0ajlobEZ3MlpXd1pyWWg3V1hyV3FQSlFjbDQ0L1RMb2R0ZWYzZ1NtbDR6eFFHY1lncVJNRTdSMGw2YlBhUXlsaVJJaW9ZR01zdVhjYmp5a0VPdDJBTVJsT21uM2d4SVBxamlXT3Q3SUR1ZmE5VzFvaWNiM1ZUaHZVZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f38460-37d3-4924-9b00-e59e9622c8b0", "record_id": "flaws_cloudtrail:0000135:f38460-37d3-4924-9b00-e59e9622c8b0", "row_index": 135, "timestamp": "2019-05-04T22:28:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f38460-37d3-4924-9b00-e59e9622c8b0", "eventTime": "2019-05-04T22:28:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhOHFhWG5wZU5oOWpjLzRLWWM0SVVxcWU0SC9ldjFLalQ2UzZESG00T1ZtS21DQmVZR0d2TFRTN0JVd29vcXNZelFPa0NIcXNzTG55ZUxqNmV2a1NwZFp6QlJoZ2xscm5tRkpKd1cyS0M1RTlid1ZOa1JCVUFNVjRxdTBDeFFWZjJITGR6VTBYOWx4RTJhOW95cFhKWEo0YnphYldBOEx0d0cyQ0J5bXJnRUxXQ3JmZmxkaDU3cm5ybEM3ZVhKUzdidkxjcFVualZ0OD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12b65924-8e9b-44c0-a5af-ac33e7c409d2", "record_id": "flaws_cloudtrail:0000136:12b65924-8e9b-44c0-a5af-ac33e7c409d2", "row_index": 136, "timestamp": "2019-05-04T22:28:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12b65924-8e9b-44c0-a5af-ac33e7c409d2", "eventTime": "2019-05-04T22:28:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEV1MzenNJUmJlMUwxbkxMbnRQV0Y5bTJKUzNhQkFhZFJRWnBoM3dyU2NiNXVEcjExSW9NSERzaDVjOEE2aW5hc0U4cU90cHdtRzFseDJTbXdXVDg0ajlobEZ3MlpXd1pyWWg3V1hyV3FQSlFjbDQ0L1RMb2R0ZWYzZ1NtbDR6eFFHY1lncVJNRTdSMGw2YlBhUXlsaVJJaW9ZR01zdVhjYmp5a0VPdDJBTVJsT21uM2d4SVBxamlXT3Q3SUR1ZmE5VzFvaWNiM1ZUaHZVZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bb7a61f-4300-4211-8b0e-4d1cd2585b58", "record_id": "flaws_cloudtrail:0000137:1bb7a61f-4300-4211-8b0e-4d1cd2585b58", "row_index": 137, "timestamp": "2019-05-04T22:28:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bb7a61f-4300-4211-8b0e-4d1cd2585b58", "eventTime": "2019-05-04T22:28:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5dGt1UExHUjJsN0FxQVRVRGNWY3o0R29DRDRaOUJKTlpZeGpmVmVhK3JBQTh3UWxqZE9qRWFRMW5PcEtVbUZ3RStGaUFxZGpScWhhOXVlNDVuR211ME5OVCtVd056QUNqcTBYT3g5Q2hORmtwUW1SQVk1a1h3ZFlpM2JuL2RhUFkvTVdWZnB3MjdGN3g0d0hPQU1nL0hQbVllcmhnVGw5dXUyZUZoMG5vRUNqNExHQmhPbE4rVmtrMlR3TXV1enBzTjdDU1VoTFNXSGJ1Skg3YThjU01wSHN3eHhndG1ZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bb7a61f-4300-4211-8b0e-4d1cd2585b58", "record_id": "flaws_cloudtrail:0000138:1bb7a61f-4300-4211-8b0e-4d1cd2585b58", "row_index": 138, "timestamp": "2019-05-04T22:28:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bb7a61f-4300-4211-8b0e-4d1cd2585b58", "eventTime": "2019-05-04T22:28:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5dGt1UExHUjJsN0FxQVRVRGNWY3o0R29DRDRaOUJKTlpZeGpmVmVhK3JBQTh3UWxqZE9qRWFRMW5PcEtVbUZ3RStGaUFxZGpScWhhOXVlNDVuR211ME5OVCtVd056QUNqcTBYT3g5Q2hORmtwUW1SQVk1a1h3ZFlpM2JuL2RhUFkvTVdWZnB3MjdGN3g0d0hPQU1nL0hQbVllcmhnVGw5dXUyZUZoMG5vRUNqNExHQmhPbE4rVmtrMlR3TXV1enBzTjdDU1VoTFNXSGJ1Skg3YThjU01wSHN3eHhndG1ZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1f99bac-4cfb-40e6-8d1d-cf35131dee69", "record_id": "flaws_cloudtrail:0000139:b1f99bac-4cfb-40e6-8d1d-cf35131dee69", "row_index": 139, "timestamp": "2019-05-04T22:28:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1f99bac-4cfb-40e6-8d1d-cf35131dee69", "eventTime": "2019-05-04T22:28:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4VFdRM1poWmxwUjdFekdFU2U1VVU1OHF2akg4QUFnc3RxTmEwZGIva1lWbG8yQU5RYUZXcU1YOW80a2dMdlp3NCtJd2lPRGwvSUhWK0lRcm11enNxWE9vb1lGNGQvWm1hV0pMSnpwSWpmSGNUaDgzejRpd0Q1eWpjRnByWVV0Ui9jdE51bUt3cHlzVHMwUFFkc2R6M1NHaUF2OU4zSlJkQ3l0V2N5S0ppZjc1U1o1cCs1ZGdiMzFIL29uZHd6Q1l1NGt6VXdnQk04RHVXYjRJaHM2QWQ2MU8vWXBHSXljPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62ce6bce-2e03-47b1-84cb-ae5b3c377a0c", "record_id": "flaws_cloudtrail:0000140:62ce6bce-2e03-47b1-84cb-ae5b3c377a0c", "row_index": 140, "timestamp": "2019-05-04T22:28:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62ce6bce-2e03-47b1-84cb-ae5b3c377a0c", "eventTime": "2019-05-04T22:28:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtK21yZjNUOWZlY1IwRjFqaVRDQzRWL2ppRitoaDEwY2ZnQ3lrd2g5bkk2UVRTZkI4aktRa3g2Z2VDY3VMMTN2bm5zN0FidlZjT2UrSk1rNjhyM1hoZEt0U1F5aUQrUVBkRVVHeWt1R0xPcW84YnZqUlFlODY4ZFdZRE5aekk2KzdPU3UydElBZkFOWW9DR2w2ZjdQSzFJdmQvQys5SWtjdmFPS1NuU3dJSXR5Mmp5bTUwaHkxdlcxTHBsNWszUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1f99bac-4cfb-40e6-8d1d-cf35131dee69", "record_id": "flaws_cloudtrail:0000141:b1f99bac-4cfb-40e6-8d1d-cf35131dee69", "row_index": 141, "timestamp": "2019-05-04T22:28:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1f99bac-4cfb-40e6-8d1d-cf35131dee69", "eventTime": "2019-05-04T22:28:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4VFdRM1poWmxwUjdFekdFU2U1VVU1OHF2akg4QUFnc3RxTmEwZGIva1lWbG8yQU5RYUZXcU1YOW80a2dMdlp3NCtJd2lPRGwvSUhWK0lRcm11enNxWE9vb1lGNGQvWm1hV0pMSnpwSWpmSGNUaDgzejRpd0Q1eWpjRnByWVV0Ui9jdE51bUt3cHlzVHMwUFFkc2R6M1NHaUF2OU4zSlJkQ3l0V2N5S0ppZjc1U1o1cCs1ZGdiMzFIL29uZHd6Q1l1NGt6VXdnQk04RHVXYjRJaHM2QWQ2MU8vWXBHSXljPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62ce6bce-2e03-47b1-84cb-ae5b3c377a0c", "record_id": "flaws_cloudtrail:0000142:62ce6bce-2e03-47b1-84cb-ae5b3c377a0c", "row_index": 142, "timestamp": "2019-05-04T22:28:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62ce6bce-2e03-47b1-84cb-ae5b3c377a0c", "eventTime": "2019-05-04T22:28:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtK21yZjNUOWZlY1IwRjFqaVRDQzRWL2ppRitoaDEwY2ZnQ3lrd2g5bkk2UVRTZkI4aktRa3g2Z2VDY3VMMTN2bm5zN0FidlZjT2UrSk1rNjhyM1hoZEt0U1F5aUQrUVBkRVVHeWt1R0xPcW84YnZqUlFlODY4ZFdZRE5aekk2KzdPU3UydElBZkFOWW9DR2w2ZjdQSzFJdmQvQys5SWtjdmFPS1NuU3dJSXR5Mmp5bTUwaHkxdlcxTHBsNWszUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc4696cd-25de-45a0-bfe8-3a8a1f9eb664", "record_id": "flaws_cloudtrail:0000143:bc4696cd-25de-45a0-bfe8-3a8a1f9eb664", "row_index": 143, "timestamp": "2019-05-04T22:28:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc4696cd-25de-45a0-bfe8-3a8a1f9eb664", "eventTime": "2019-05-04T22:28:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPaXFwL0ozWlNXZElwZkJnb25sQUdBWHMvSzhMTXhWUkI5bk5qUzEzbHRtb0ZOUkcyMElKNWFYMXE0MStFUVZqVzh6c1BTYjNFQUNjamcraW1DUWVUY1doS2FKYWNRRFFhdFl4NWcvOEJHV3NlNzdQRlhnbVdMYkxtN0FRVk9LWUlrbXk1R1lma1lQeTZxNmV0V284c0RkeVhURVpaRk5abzFtUnNNaHZNbm9JVXdyZmIwN0hTS3VjZ1VTWnhEdjRveWI4TVFOOGdyTXpVVnZsRUJYUW5WWE8yMm1RR3pFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e306b0b-3738-41bc-a2c3-defe56532b2", "record_id": "flaws_cloudtrail:0000144:7e306b0b-3738-41bc-a2c3-defe56532b2", "row_index": 144, "timestamp": "2019-05-04T22:28:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e306b0b-3738-41bc-a2c3-defe56532b2", "eventTime": "2019-05-04T22:28:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEVTExcVFDWHBxVHNvY045YjBybVRqUE9ENE5DaHJvcWlxUFpRaVpuVjczUkhtMXExanZ4S3RxaWwyYzdmU0V4dnlqQ21QLy9nNndJQ0J6dTZ6Z3pMNWdzRzByakZWaldPSzYzaWREWVNUaEdVVjgzKzFFL0pCcVZiM3JoMS9Sd3FadldvNGZRWWRaUHcvdk1QNWFkOWVMNklvWC9GeXlCazQrczNkUlYyUEVnSGQ0RDc1US9JZlhEZGxsNUlsRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc4696cd-25de-45a0-bfe8-3a8a1f9eb664", "record_id": "flaws_cloudtrail:0000145:bc4696cd-25de-45a0-bfe8-3a8a1f9eb664", "row_index": 145, "timestamp": "2019-05-04T22:28:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc4696cd-25de-45a0-bfe8-3a8a1f9eb664", "eventTime": "2019-05-04T22:28:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPaXFwL0ozWlNXZElwZkJnb25sQUdBWHMvSzhMTXhWUkI5bk5qUzEzbHRtb0ZOUkcyMElKNWFYMXE0MStFUVZqVzh6c1BTYjNFQUNjamcraW1DUWVUY1doS2FKYWNRRFFhdFl4NWcvOEJHV3NlNzdQRlhnbVdMYkxtN0FRVk9LWUlrbXk1R1lma1lQeTZxNmV0V284c0RkeVhURVpaRk5abzFtUnNNaHZNbm9JVXdyZmIwN0hTS3VjZ1VTWnhEdjRveWI4TVFOOGdyTXpVVnZsRUJYUW5WWE8yMm1RR3pFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e306b0b-3738-41bc-a2c3-defe56532b2", "record_id": "flaws_cloudtrail:0000146:7e306b0b-3738-41bc-a2c3-defe56532b2", "row_index": 146, "timestamp": "2019-05-04T22:28:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e306b0b-3738-41bc-a2c3-defe56532b2", "eventTime": "2019-05-04T22:28:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEVTExcVFDWHBxVHNvY045YjBybVRqUE9ENE5DaHJvcWlxUFpRaVpuVjczUkhtMXExanZ4S3RxaWwyYzdmU0V4dnlqQ21QLy9nNndJQ0J6dTZ6Z3pMNWdzRzByakZWaldPSzYzaWREWVNUaEdVVjgzKzFFL0pCcVZiM3JoMS9Sd3FadldvNGZRWWRaUHcvdk1QNWFkOWVMNklvWC9GeXlCazQrczNkUlYyUEVnSGQ0RDc1US9JZlhEZGxsNUlsRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83d061906-503f-4fd5-88f3-848fbaec3be9", "record_id": "flaws_cloudtrail:0000147:83d061906-503f-4fd5-88f3-848fbaec3be9", "row_index": 147, "timestamp": "2019-05-04T22:28:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83d061906-503f-4fd5-88f3-848fbaec3be9", "eventTime": "2019-05-04T22:28:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXcjZjWXBTVE9rNXNaOFpqVGR6N3dBSnQ5aGN1dHNJQUMyTEdPNVBtcFZUbHJ1bjYxWTF1c1I5M2M4OTV3QzQwWUVxLzA5MWxpWTlpbEhPbnppemVHaW13Q3NzRnZ5MnNHcWVPR2F5d0oxa2drUkxPeHpURGFPOTFvOTFYUWs3elV2UUhnNVEveHJIZm1TUDh2eUV5UTAxRllXVFhUQTBLRmJ0dGZxeWZGb3EzbE1xdEIyVTl5UjZHOWwvMnhTYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ebc56a7-fa20-4750-8aa7-bb85dd729e38", "record_id": "flaws_cloudtrail:0000148:6ebc56a7-fa20-4750-8aa7-bb85dd729e38", "row_index": 148, "timestamp": "2019-05-04T22:28:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ebc56a7-fa20-4750-8aa7-bb85dd729e38", "eventTime": "2019-05-04T22:28:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGbGhpZTJUNWNucTZnZUplYlR6YXUrcXoyTHpGRFVPNExTeHlXekdtendkWU8wOEJvM3I4T2FvWHh4aUNvWXpQeTRMQlorVk5FVWtlYTE2WVFsUU84YnEwSytXK0wzNXJYaWROWjhQR2NhdXVOWGh5amdqSHhhcUtBNUNKd09FenY3RkNCSG5WWlc3L3RHSkN4R2JGWU1DSU52NGMzVnVaMUx5TVFCV0NuYXBYRDdRVmdkSVBCbTdNemU0dWM0cnB6TC83UkNibFJBeGM1OEtVK1VNSHVqVkQ3aWpGeEdvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83d061906-503f-4fd5-88f3-848fbaec3be9", "record_id": "flaws_cloudtrail:0000149:83d061906-503f-4fd5-88f3-848fbaec3be9", "row_index": 149, "timestamp": "2019-05-04T22:28:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83d061906-503f-4fd5-88f3-848fbaec3be9", "eventTime": "2019-05-04T22:28:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXcjZjWXBTVE9rNXNaOFpqVGR6N3dBSnQ5aGN1dHNJQUMyTEdPNVBtcFZUbHJ1bjYxWTF1c1I5M2M4OTV3QzQwWUVxLzA5MWxpWTlpbEhPbnppemVHaW13Q3NzRnZ5MnNHcWVPR2F5d0oxa2drUkxPeHpURGFPOTFvOTFYUWs3elV2UUhnNVEveHJIZm1TUDh2eUV5UTAxRllXVFhUQTBLRmJ0dGZxeWZGb3EzbE1xdEIyVTl5UjZHOWwvMnhTYz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ebc56a7-fa20-4750-8aa7-bb85dd729e38", "record_id": "flaws_cloudtrail:0000150:6ebc56a7-fa20-4750-8aa7-bb85dd729e38", "row_index": 150, "timestamp": "2019-05-04T22:28:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ebc56a7-fa20-4750-8aa7-bb85dd729e38", "eventTime": "2019-05-04T22:28:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGbGhpZTJUNWNucTZnZUplYlR6YXUrcXoyTHpGRFVPNExTeHlXekdtendkWU8wOEJvM3I4T2FvWHh4aUNvWXpQeTRMQlorVk5FVWtlYTE2WVFsUU84YnEwSytXK0wzNXJYaWROWjhQR2NhdXVOWGh5amdqSHhhcUtBNUNKd09FenY3RkNCSG5WWlc3L3RHSkN4R2JGWU1DSU52NGMzVnVaMUx5TVFCV0NuYXBYRDdRVmdkSVBCbTdNemU0dWM0cnB6TC83UkNibFJBeGM1OEtVK1VNSHVqVkQ3aWpGeEdvPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b57a7073-1912-4166-8802-6eb81c08fa84", "record_id": "flaws_cloudtrail:0000151:b57a7073-1912-4166-8802-6eb81c08fa84", "row_index": 151, "timestamp": "2019-05-04T22:28:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b57a7073-1912-4166-8802-6eb81c08fa84", "eventTime": "2019-05-04T22:28:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxaU1JcGQ4bXZENnBMYVBpK1Z6WUg3Q295Yk5ZczVNWHMwa0JZejdLWThFcnhOU3dDbVlVSENGWVNpVm84d25IZEJubGtHQ3dIcXRjd0s2VHREZWpqVU1QRGlXTGpFckRWREpnbGhvMEI4LzJFRVRSMDBEbWhiRUM1djFZSjJyb016akZDd1NMclJ4OXpSR2N4blJBUklHOENaZWkvRG5RbDNQemQvckZRNkV1OEllT2pTY0ZuWWwvenZSWkNzY3VNS3BLWmNzMUVqaE9JT2FMNUNyWFUzVHpoNk9CTngwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "324436a7d-54ca-427c-b8b9-3f0879dcd18a", "record_id": "flaws_cloudtrail:0000152:324436a7d-54ca-427c-b8b9-3f0879dcd18a", "row_index": 152, "timestamp": "2019-05-04T22:28:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "324436a7d-54ca-427c-b8b9-3f0879dcd18a", "eventTime": "2019-05-04T22:28:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWdC9nMnFqdE9jczFRamZTdVVFaXNDWDRCY3pmeEFaNUk5OVpmVEtPT1RWSU5xbUV5WklRK05YZGNxMkNpeFNJODAzaGIrN0pycFl5aFg2blJMNHRkRE9tZ1h3NUlwd2tlbmRCSDYwYTVuSFFzWHhNL2ZSWG5ybHl5U0F4Y1hMWTV6VEtoWWxxV0hGbWRROCtjam5xTXFwNGNXT0xibHdaWmtWMGdSK3Z4VDFQVWdoNTZCZlZqL2IwZ0ljbGtqRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b57a7073-1912-4166-8802-6eb81c08fa84", "record_id": "flaws_cloudtrail:0000153:b57a7073-1912-4166-8802-6eb81c08fa84", "row_index": 153, "timestamp": "2019-05-04T22:28:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b57a7073-1912-4166-8802-6eb81c08fa84", "eventTime": "2019-05-04T22:28:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxaU1JcGQ4bXZENnBMYVBpK1Z6WUg3Q295Yk5ZczVNWHMwa0JZejdLWThFcnhOU3dDbVlVSENGWVNpVm84d25IZEJubGtHQ3dIcXRjd0s2VHREZWpqVU1QRGlXTGpFckRWREpnbGhvMEI4LzJFRVRSMDBEbWhiRUM1djFZSjJyb016akZDd1NMclJ4OXpSR2N4blJBUklHOENaZWkvRG5RbDNQemQvckZRNkV1OEllT2pTY0ZuWWwvenZSWkNzY3VNS3BLWmNzMUVqaE9JT2FMNUNyWFUzVHpoNk9CTngwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "324436a7d-54ca-427c-b8b9-3f0879dcd18a", "record_id": "flaws_cloudtrail:0000154:324436a7d-54ca-427c-b8b9-3f0879dcd18a", "row_index": 154, "timestamp": "2019-05-04T22:28:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "324436a7d-54ca-427c-b8b9-3f0879dcd18a", "eventTime": "2019-05-04T22:28:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWdC9nMnFqdE9jczFRamZTdVVFaXNDWDRCY3pmeEFaNUk5OVpmVEtPT1RWSU5xbUV5WklRK05YZGNxMkNpeFNJODAzaGIrN0pycFl5aFg2blJMNHRkRE9tZ1h3NUlwd2tlbmRCSDYwYTVuSFFzWHhNL2ZSWG5ybHl5U0F4Y1hMWTV6VEtoWWxxV0hGbWRROCtjam5xTXFwNGNXT0xibHdaWmtWMGdSK3Z4VDFQVWdoNTZCZlZqL2IwZ0ljbGtqRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a8059de-5732-434c-a004-601aba52a968", "record_id": "flaws_cloudtrail:0000155:3a8059de-5732-434c-a004-601aba52a968", "row_index": 155, "timestamp": "2019-05-04T22:29:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a8059de-5732-434c-a004-601aba52a968", "eventTime": "2019-05-04T22:29:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a8059de-5732-434c-a004-601aba52a968", "record_id": "flaws_cloudtrail:0000156:3a8059de-5732-434c-a004-601aba52a968", "row_index": 156, "timestamp": "2019-05-04T22:29:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a8059de-5732-434c-a004-601aba52a968", "eventTime": "2019-05-04T22:29:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d0397d9-ef76-4f6c-9805-e9ff31c35de3", "record_id": "flaws_cloudtrail:0000157:7d0397d9-ef76-4f6c-9805-e9ff31c35de3", "row_index": 157, "timestamp": "2019-05-04T22:29:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1892, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d0397d9-ef76-4f6c-9805-e9ff31c35de3", "eventTime": "2019-05-04T22:29:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALPL9MVM99Q64IWC7", "expiration": "May 5, 2019 4:41:05 AM", "sessionToken": "AgoJb3JpZ2luX2VjEPf//////////wEaCXVzLXdlc3QtMiJHMEUCIQD/2AsAv2MLy7T9QgdQb6vLwKuR9ouizD9I2d7gqsif5wIgMFPZEU0UEDS2F8IsF/flIiYYQ1qvuZpFNxMLrx6bKbAq4wMI4P//////////ARAAGgw5NzU0MjYyNjIwMjkiDJp+waTu/yp0yarfISq3Ay/nGCeklL6s47tRc27A9Yg41lErutO5BRMKWslC/w0zdKwriIXqqZdpTniVuAmFmh+bojqWM3/4ocAfwZ24nEgTdSZKXY5bHWJst8av/Wg9w6qlUIpHktPKf80VS7veuEPBUSCf371DzEZgwYCg5Gm10b85dy0Mymj3O+TKAhOGsRT9xtKX8efaynF1wDfdCSMsfDnfE29iCRkuuLOyZE3ZzKnCbn15n9zkhb6+Hj9Tmsm+2nnOu2KqrKqgKjDdc3//Xh1FwYt8zz6NzruvyH64geTU+WPt3NkHrGCL1lvoBXv3Ty0Q9K2J1EVSHNTZzuDd6CJzwxeRYTgkvFZS+C03HxuGn2uNozijj/q1OXpunrePEqJU7QIHEVVzwlo3wYQEnP209iPCsxKMaH4rrhMTVLz/9xtHdW0X8BC3jLIRRJIWYQkhcfUgL1FNi8fSkADAWtYL+fcP0fN4VIc37qw/nzOWkzaVFFRs/fN2slz4dpdh61sKQc86WM2DMe0FEr97nHwfTMvdktDYWBJJEZEtE3/wa2viz1QWLDEZ6RxIy1qBxT76MhtyL3JWSZCyOl9krRIpzNEwz6S45gU6tAFiKNvGjZChp0OvxglSya22gOqFXvljpwnFZG996zeHYHwyD+Yi4Y+H9GhExMtXyAltn+Qrsjc3kkDJfD0R7CIVJFp1091pIGDfhLI7Qk4QGnKOQFfhM3zyKwsEgSmCOWlnjAisq+x6ZuCNrGgJnLOIGzP3z4G0F/TXQvyiEGUXinSP/rm1ffg3TlalvunC9VCeuo56KbuZgIswt072ml9ef8XQPkd7WuTKcXW472/V300oSUA="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d0397d9-ef76-4f6c-9805-e9ff31c35de3", "record_id": "flaws_cloudtrail:0000158:7d0397d9-ef76-4f6c-9805-e9ff31c35de3", "row_index": 158, "timestamp": "2019-05-04T22:29:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1892, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d0397d9-ef76-4f6c-9805-e9ff31c35de3", "eventTime": "2019-05-04T22:29:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALPL9MVM99Q64IWC7", "expiration": "May 5, 2019 4:41:05 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55c4bff0-74c9-4dc0-a173-0b00b1bb7649", "record_id": "flaws_cloudtrail:0000159:55c4bff0-74c9-4dc0-a173-0b00b1bb7649", "row_index": 159, "timestamp": "2019-05-04T22:29:41Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55c4bff0-74c9-4dc0-a173-0b00b1bb7649", "eventTime": "2019-05-04T22:29:41Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55c4bff0-74c9-4dc0-a173-0b00b1bb7649", "record_id": "flaws_cloudtrail:0000160:55c4bff0-74c9-4dc0-a173-0b00b1bb7649", "row_index": 160, "timestamp": "2019-05-04T22:29:41Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55c4bff0-74c9-4dc0-a173-0b00b1bb7649", "eventTime": "2019-05-04T22:29:41Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "140b2808-8ee7-44f5-bc77-1e941c726c1a", "record_id": "flaws_cloudtrail:0000161:140b2808-8ee7-44f5-bc77-1e941c726c1a", "row_index": 161, "timestamp": "2019-05-04T22:29:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "140b2808-8ee7-44f5-bc77-1e941c726c1a", "eventTime": "2019-05-04T22:29:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "140b2808-8ee7-44f5-bc77-1e941c726c1a", "record_id": "flaws_cloudtrail:0000162:140b2808-8ee7-44f5-bc77-1e941c726c1a", "row_index": 162, "timestamp": "2019-05-04T22:29:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "140b2808-8ee7-44f5-bc77-1e941c726c1a", "eventTime": "2019-05-04T22:29:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac2b4b12-bbda-49fa-9f3f-36311198f96e", "record_id": "flaws_cloudtrail:0000163:ac2b4b12-bbda-49fa-9f3f-36311198f96e", "row_index": 163, "timestamp": "2019-05-04T22:30:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 898, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac2b4b12-bbda-49fa-9f3f-36311198f96e", "eventTime": "2019-05-04T22:30:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "awsRegion": "us-east-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac2b4b12-bbda-49fa-9f3f-36311198f96e", "record_id": "flaws_cloudtrail:0000164:ac2b4b12-bbda-49fa-9f3f-36311198f96e", "row_index": 164, "timestamp": "2019-05-04T22:30:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 898, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac2b4b12-bbda-49fa-9f3f-36311198f96e", "eventTime": "2019-05-04T22:30:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "awsRegion": "us-east-2", "errorCode": "Client.InvalidUserID.Malformed", "errorMessage": "Invalid user id: \"AIDA9BO36HFBHKGJAO9C1\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "AIDA9BO36HFBHKGJAO9C1"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e56ee091-2f16-4d73-9f5f-1e2ea93e021d", "record_id": "flaws_cloudtrail:0000165:e56ee091-2f16-4d73-9f5f-1e2ea93e021d", "row_index": 165, "timestamp": "2019-05-04T22:30:47Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e56ee091-2f16-4d73-9f5f-1e2ea93e021d", "eventTime": "2019-05-04T22:30:47Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e56ee091-2f16-4d73-9f5f-1e2ea93e021d", "record_id": "flaws_cloudtrail:0000166:e56ee091-2f16-4d73-9f5f-1e2ea93e021d", "row_index": 166, "timestamp": "2019-05-04T22:30:47Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e56ee091-2f16-4d73-9f5f-1e2ea93e021d", "eventTime": "2019-05-04T22:30:47Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e355357-6df9-4bc0-91e8-22f680e7c00a", "record_id": "flaws_cloudtrail:0000167:4e355357-6df9-4bc0-91e8-22f680e7c00a", "row_index": 167, "timestamp": "2019-05-04T22:30:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e355357-6df9-4bc0-91e8-22f680e7c00a", "eventTime": "2019-05-04T22:30:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e355357-6df9-4bc0-91e8-22f680e7c00a", "record_id": "flaws_cloudtrail:0000168:4e355357-6df9-4bc0-91e8-22f680e7c00a", "row_index": 168, "timestamp": "2019-05-04T22:30:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e355357-6df9-4bc0-91e8-22f680e7c00a", "eventTime": "2019-05-04T22:30:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85393d20-b540-4aeb-bb95-d0eb9412df0d", "record_id": "flaws_cloudtrail:0000169:85393d20-b540-4aeb-bb95-d0eb9412df0d", "row_index": 169, "timestamp": "2019-05-04T22:31:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85393d20-b540-4aeb-bb95-d0eb9412df0d", "eventTime": "2019-05-04T22:31:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85393d20-b540-4aeb-bb95-d0eb9412df0d", "record_id": "flaws_cloudtrail:0000170:85393d20-b540-4aeb-bb95-d0eb9412df0d", "row_index": 170, "timestamp": "2019-05-04T22:31:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85393d20-b540-4aeb-bb95-d0eb9412df0d", "eventTime": "2019-05-04T22:31:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.148 Python/2.7.10 Darwin/17.5.0 botocore/1.12.138", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df7d7b3d-890f-4168-82a7-30d7c6d02967", "record_id": "flaws_cloudtrail:0000171:df7d7b3d-890f-4168-82a7-30d7c6d02967", "row_index": 171, "timestamp": "2019-05-04T22:35:02Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df7d7b3d-890f-4168-82a7-30d7c6d02967", "eventTime": "2019-05-04T22:35:02Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "errorCode": "Client.InvalidRequest", "errorMessage": "The request received was invalid.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df7d7b3d-890f-4168-82a7-30d7c6d02967", "record_id": "flaws_cloudtrail:0000172:df7d7b3d-890f-4168-82a7-30d7c6d02967", "row_index": 172, "timestamp": "2019-05-04T22:35:02Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df7d7b3d-890f-4168-82a7-30d7c6d02967", "eventTime": "2019-05-04T22:35:02Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "errorCode": "Client.InvalidRequest", "errorMessage": "The request received was invalid.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc033535f-5e10-4b63-a3d7-2c74c36d1bcb", "record_id": "flaws_cloudtrail:0000173:dc033535f-5e10-4b63-a3d7-2c74c36d1bcb", "row_index": 173, "timestamp": "2019-05-04T22:35:46Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc033535f-5e10-4b63-a3d7-2c74c36d1bcb", "eventTime": "2019-05-04T22:35:46Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc033535f-5e10-4b63-a3d7-2c74c36d1bcb", "record_id": "flaws_cloudtrail:0000174:dc033535f-5e10-4b63-a3d7-2c74c36d1bcb", "row_index": 174, "timestamp": "2019-05-04T22:35:46Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc033535f-5e10-4b63-a3d7-2c74c36d1bcb", "eventTime": "2019-05-04T22:35:46Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d5b0670-c0d4-4b0c-b409-7ec2f48e24a8", "record_id": "flaws_cloudtrail:0000175:3d5b0670-c0d4-4b0c-b409-7ec2f48e24a8", "row_index": 175, "timestamp": "2019-05-04T22:37:54Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1422, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d5b0670-c0d4-4b0c-b409-7ec2f48e24a8", "eventTime": "2019-05-04T22:37:54Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "description": "This is my copied snapshot", "destinationRegion": "us-west-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&Description=This%20is%20my%20copied%20snapshot&SourceRegion=us-west-2&SourceSnapshotId=snap-83d15d668fb2941db&DestinationRegion=us-west-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F72020%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=72020T34999Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=842cd28459282129bb86fefa8072e493e6576444bfbd1a4c688d29c92c250dc0"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d5b0670-c0d4-4b0c-b409-7ec2f48e24a8", "record_id": "flaws_cloudtrail:0000176:3d5b0670-c0d4-4b0c-b409-7ec2f48e24a8", "row_index": 176, "timestamp": "2019-05-04T22:37:54Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1422, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d5b0670-c0d4-4b0c-b409-7ec2f48e24a8", "eventTime": "2019-05-04T22:37:54Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "description": "This is my copied snapshot", "destinationRegion": "us-west-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&Description=This%20is%20my%20copied%20snapshot&SourceRegion=us-west-2&SourceSnapshotId=snap-83d15d668fb2941db&DestinationRegion=us-west-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F72020%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=72020T34999Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=842cd28459282129bb86fefa8072e493e6576444bfbd1a4c688d29c92c250dc0"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e63753-4ab6-4e26-9a8a-ecbe7cf052d2", "record_id": "flaws_cloudtrail:0000177:1e63753-4ab6-4e26-9a8a-ecbe7cf052d2", "row_index": 177, "timestamp": "2019-05-04T22:38:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e63753-4ab6-4e26-9a8a-ecbe7cf052d2", "eventTime": "2019-05-04T22:38:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e63753-4ab6-4e26-9a8a-ecbe7cf052d2", "record_id": "flaws_cloudtrail:0000178:1e63753-4ab6-4e26-9a8a-ecbe7cf052d2", "row_index": 178, "timestamp": "2019-05-04T22:38:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e63753-4ab6-4e26-9a8a-ecbe7cf052d2", "eventTime": "2019-05-04T22:38:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bbd762a-02dc-41a8-b198-67733b2cdbb", "record_id": "flaws_cloudtrail:0000179:1bbd762a-02dc-41a8-b198-67733b2cdbb", "row_index": 179, "timestamp": "2019-05-04T22:39:19Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1332, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bbd762a-02dc-41a8-b198-67733b2cdbb", "eventTime": "2019-05-04T22:39:19Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "destinationRegion": "us-west-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&SourceSnapshotId=snap-83d15d668fb2941db&DestinationRegion=us-west-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F72020%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=72020T957792Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=883faa80c6039f117e8311bccea4dddd673d23c6e4b0d1d22f456f45fc0eff4a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bbd762a-02dc-41a8-b198-67733b2cdbb", "record_id": "flaws_cloudtrail:0000180:1bbd762a-02dc-41a8-b198-67733b2cdbb", "row_index": 180, "timestamp": "2019-05-04T22:39:19Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1332, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bbd762a-02dc-41a8-b198-67733b2cdbb", "eventTime": "2019-05-04T22:39:19Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "destinationRegion": "us-west-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&SourceSnapshotId=snap-83d15d668fb2941db&DestinationRegion=us-west-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F72020%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=72020T957792Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=883faa80c6039f117e8311bccea4dddd673d23c6e4b0d1d22f456f45fc0eff4a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af14d171-cdf0-4c75-ac63-ec2815c21d70", "record_id": "flaws_cloudtrail:0000181:af14d171-cdf0-4c75-ac63-ec2815c21d70", "row_index": 181, "timestamp": "2019-05-04T22:42:01Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af14d171-cdf0-4c75-ac63-ec2815c21d70", "eventTime": "2019-05-04T22:42:01Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af14d171-cdf0-4c75-ac63-ec2815c21d70", "record_id": "flaws_cloudtrail:0000182:af14d171-cdf0-4c75-ac63-ec2815c21d70", "row_index": 182, "timestamp": "2019-05-04T22:42:01Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af14d171-cdf0-4c75-ac63-ec2815c21d70", "eventTime": "2019-05-04T22:42:01Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "987bf758-a27e-4123-bcb5-5fb597721", "record_id": "flaws_cloudtrail:0000183:987bf758-a27e-4123-bcb5-5fb597721", "row_index": 183, "timestamp": "2019-05-04T22:51:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIALPL9MVM99Q64IWC7", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "63.196.215.112", "user_agent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1159, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "987bf758-a27e-4123-bcb5-5fb597721", "eventTime": "2019-05-04T22:51:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIALPL9MVM99Q64IWC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T22:29:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "987bf758-a27e-4123-bcb5-5fb597721", "record_id": "flaws_cloudtrail:0000184:987bf758-a27e-4123-bcb5-5fb597721", "row_index": 184, "timestamp": "2019-05-04T22:51:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIALPL9MVM99Q64IWC7", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "63.196.215.112", "user_agent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1159, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "987bf758-a27e-4123-bcb5-5fb597721", "eventTime": "2019-05-04T22:51:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIALPL9MVM99Q64IWC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T22:29:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc076ff1-d6e0-41df-b111-4d5b257cbdd0", "record_id": "flaws_cloudtrail:0000185:dc076ff1-d6e0-41df-b111-4d5b257cbdd0", "row_index": 185, "timestamp": "2019-05-04T22:52:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIALPL9MVM99Q64IWC7", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1121, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc076ff1-d6e0-41df-b111-4d5b257cbdd0", "eventTime": "2019-05-04T22:52:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIALPL9MVM99Q64IWC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T22:29:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc076ff1-d6e0-41df-b111-4d5b257cbdd0", "record_id": "flaws_cloudtrail:0000186:dc076ff1-d6e0-41df-b111-4d5b257cbdd0", "row_index": 186, "timestamp": "2019-05-04T22:52:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIALPL9MVM99Q64IWC7", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1121, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc076ff1-d6e0-41df-b111-4d5b257cbdd0", "eventTime": "2019-05-04T22:52:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIALPL9MVM99Q64IWC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T22:29:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ea28769-d2ff-4c6e-85ce-7e1d9c7b62a1", "record_id": "flaws_cloudtrail:0000187:4ea28769-d2ff-4c6e-85ce-7e1d9c7b62a1", "row_index": 187, "timestamp": "2019-05-04T22:52:21Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIALPL9MVM99Q64IWC7", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1114, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ea28769-d2ff-4c6e-85ce-7e1d9c7b62a1", "eventTime": "2019-05-04T22:52:21Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIALPL9MVM99Q64IWC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T22:29:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ea28769-d2ff-4c6e-85ce-7e1d9c7b62a1", "record_id": "flaws_cloudtrail:0000188:4ea28769-d2ff-4c6e-85ce-7e1d9c7b62a1", "row_index": 188, "timestamp": "2019-05-04T22:52:21Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIALPL9MVM99Q64IWC7", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1114, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ea28769-d2ff-4c6e-85ce-7e1d9c7b62a1", "eventTime": "2019-05-04T22:52:21Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIALPL9MVM99Q64IWC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T22:29:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba51d360-c34b-4b43-a3a5-6a4f5c2b67b0", "record_id": "flaws_cloudtrail:0000189:ba51d360-c34b-4b43-a3a5-6a4f5c2b67b0", "row_index": 189, "timestamp": "2019-05-04T22:52:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "[aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba51d360-c34b-4b43-a3a5-6a4f5c2b67b0", "eventTime": "2019-05-04T22:52:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "[aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba51d360-c34b-4b43-a3a5-6a4f5c2b67b0", "record_id": "flaws_cloudtrail:0000190:ba51d360-c34b-4b43-a3a5-6a4f5c2b67b0", "row_index": 190, "timestamp": "2019-05-04T22:52:36Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "15.201.214.255", "user_agent": "[aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba51d360-c34b-4b43-a3a5-6a4f5c2b67b0", "eventTime": "2019-05-04T22:52:36Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "15.201.214.255", "userAgent": "[aws-cli/1.16.149 Python/3.7.2 Darwin/18.5.0 botocore/1.12.139]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73adff64-c449-444a-8366-ec344828b9f", "record_id": "flaws_cloudtrail:0000191:73adff64-c449-444a-8366-ec344828b9f", "row_index": 191, "timestamp": "2019-05-04T22:52:44Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIALPL9MVM99Q64IWC7", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1168, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73adff64-c449-444a-8366-ec344828b9f", "eventTime": "2019-05-04T22:52:44Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIALPL9MVM99Q64IWC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T22:29:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73adff64-c449-444a-8366-ec344828b9f", "record_id": "flaws_cloudtrail:0000192:73adff64-c449-444a-8366-ec344828b9f", "row_index": 192, "timestamp": "2019-05-04T22:52:44Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIALPL9MVM99Q64IWC7", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1168, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73adff64-c449-444a-8366-ec344828b9f", "eventTime": "2019-05-04T22:52:44Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIALPL9MVM99Q64IWC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T22:29:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a67a7977-b726-4ff4-9875-89cc480d44fe", "record_id": "flaws_cloudtrail:0000193:a67a7977-b726-4ff4-9875-89cc480d44fe", "row_index": 193, "timestamp": "2019-05-04T22:52:56Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIALPL9MVM99Q64IWC7", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1158, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a67a7977-b726-4ff4-9875-89cc480d44fe", "eventTime": "2019-05-04T22:52:56Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetUser on resource: user i-aa2d3b42e5c6e801a", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIALPL9MVM99Q64IWC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T22:29:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a67a7977-b726-4ff4-9875-89cc480d44fe", "record_id": "flaws_cloudtrail:0000194:a67a7977-b726-4ff4-9875-89cc480d44fe", "row_index": 194, "timestamp": "2019-05-04T22:52:56Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIALPL9MVM99Q64IWC7", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1158, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a67a7977-b726-4ff4-9875-89cc480d44fe", "eventTime": "2019-05-04T22:52:56Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetUser on resource: user i-aa2d3b42e5c6e801a", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIALPL9MVM99Q64IWC7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T22:29:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9c6f569-8a06-4ce6-afdb-1a8330e02c85", "record_id": "flaws_cloudtrail:0000195:d9c6f569-8a06-4ce6-afdb-1a8330e02c85", "row_index": 195, "timestamp": "2019-05-04T22:55:20Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAP086LHU108AJT58T", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "63.196.215.112", "user_agent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1211, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9c6f569-8a06-4ce6-afdb-1a8330e02c85", "eventTime": "2019-05-04T22:55:20Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAP086LHU108AJT58T", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T22:13:07Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9c6f569-8a06-4ce6-afdb-1a8330e02c85", "record_id": "flaws_cloudtrail:0000196:d9c6f569-8a06-4ce6-afdb-1a8330e02c85", "row_index": 196, "timestamp": "2019-05-04T22:55:20Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAP086LHU108AJT58T", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "63.196.215.112", "user_agent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1211, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9c6f569-8a06-4ce6-afdb-1a8330e02c85", "eventTime": "2019-05-04T22:55:20Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAP086LHU108AJT58T", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T22:13:07Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01afbe8c-db67-43d7-9cd8-dee8dbb408e9", "record_id": "flaws_cloudtrail:0000197:01afbe8c-db67-43d7-9cd8-dee8dbb408e9", "row_index": 197, "timestamp": "2019-05-04T22:55:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAP086LHU108AJT58T", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1159, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01afbe8c-db67-43d7-9cd8-dee8dbb408e9", "eventTime": "2019-05-04T22:55:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAP086LHU108AJT58T", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T22:13:07Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01afbe8c-db67-43d7-9cd8-dee8dbb408e9", "record_id": "flaws_cloudtrail:0000198:01afbe8c-db67-43d7-9cd8-dee8dbb408e9", "row_index": 198, "timestamp": "2019-05-04T22:55:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAP086LHU108AJT58T", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1159, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01afbe8c-db67-43d7-9cd8-dee8dbb408e9", "eventTime": "2019-05-04T22:55:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAP086LHU108AJT58T", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T22:13:07Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "497eefce-e67b-40bc-ae09-2847a8a30c85", "record_id": "flaws_cloudtrail:0000199:497eefce-e67b-40bc-ae09-2847a8a30c85", "row_index": 199, "timestamp": "2019-05-04T22:55:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAP086LHU108AJT58T", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1163, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "497eefce-e67b-40bc-ae09-2847a8a30c85", "eventTime": "2019-05-04T22:55:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAP086LHU108AJT58T", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T22:13:07Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "497eefce-e67b-40bc-ae09-2847a8a30c85", "record_id": "flaws_cloudtrail:0000200:497eefce-e67b-40bc-ae09-2847a8a30c85", "row_index": 200, "timestamp": "2019-05-04T22:55:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAP086LHU108AJT58T", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1163, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "497eefce-e67b-40bc-ae09-2847a8a30c85", "eventTime": "2019-05-04T22:55:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAP086LHU108AJT58T", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T22:13:07Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f878b772-6379-4a4f-bf15-d55bcb6e8d7b", "record_id": "flaws_cloudtrail:0000201:f878b772-6379-4a4f-bf15-d55bcb6e8d7b", "row_index": 201, "timestamp": "2019-05-04T22:55:44Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAP086LHU108AJT58T", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1189, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f878b772-6379-4a4f-bf15-d55bcb6e8d7b", "eventTime": "2019-05-04T22:55:44Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAP086LHU108AJT58T", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T22:13:07Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "responseElements": {"userId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f878b772-6379-4a4f-bf15-d55bcb6e8d7b", "record_id": "flaws_cloudtrail:0000202:f878b772-6379-4a4f-bf15-d55bcb6e8d7b", "row_index": 202, "timestamp": "2019-05-04T22:55:44Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAP086LHU108AJT58T", "session_issuer_arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "session_issuer_user_name": "aws:ec2-instance"}, "network": {"source_ip": "63.196.215.112", "user_agent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1189, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f878b772-6379-4a4f-bf15-d55bcb6e8d7b", "eventTime": "2019-05-04T22:55:44Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAP086LHU108AJT58T", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-05-04T22:13:07Z"}, "sessionIssuer": {"type": "Role", "principalId": "811596193553:aws:ec2-instance", "arn": "arn:aws:iam::811596193553:role/aws:ec2-instance", "accountId": "811596193553", "userName": "aws:ec2-instance"}}}, "responseElements": {"userId": "811596193553:aws:ec2-instance:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/aws:ec2-instance/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7bc25e2-fd32-401a-ad72-bd3600d2be5c", "record_id": "flaws_cloudtrail:0000203:f7bc25e2-fd32-401a-ad72-bd3600d2be5c", "row_index": 203, "timestamp": "2019-05-04T23:09:44Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7bc25e2-fd32-401a-ad72-bd3600d2be5c", "eventTime": "2019-05-04T23:09:44Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7bc25e2-fd32-401a-ad72-bd3600d2be5c", "record_id": "flaws_cloudtrail:0000204:f7bc25e2-fd32-401a-ad72-bd3600d2be5c", "row_index": 204, "timestamp": "2019-05-04T23:09:44Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7bc25e2-fd32-401a-ad72-bd3600d2be5c", "eventTime": "2019-05-04T23:09:44Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "766d6f00-ee15-4014-a025-4db82c63e87a", "record_id": "flaws_cloudtrail:0000205:766d6f00-ee15-4014-a025-4db82c63e87a", "row_index": 205, "timestamp": "2019-05-04T23:09:54Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "766d6f00-ee15-4014-a025-4db82c63e87a", "eventTime": "2019-05-04T23:09:54Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "766d6f00-ee15-4014-a025-4db82c63e87a", "record_id": "flaws_cloudtrail:0000206:766d6f00-ee15-4014-a025-4db82c63e87a", "row_index": 206, "timestamp": "2019-05-04T23:09:54Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "766d6f00-ee15-4014-a025-4db82c63e87a", "eventTime": "2019-05-04T23:09:54Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "[aws-cli/1.16.152 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH botocore/1.12.142]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f4f5ca5-24bb-42e9-89d1-6bb19e4a6ccf", "record_id": "flaws_cloudtrail:0000207:4f4f5ca5-24bb-42e9-89d1-6bb19e4a6ccf", "row_index": 207, "timestamp": "2019-05-04T23:11:23Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f4f5ca5-24bb-42e9-89d1-6bb19e4a6ccf", "eventTime": "2019-05-04T23:11:23Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f4f5ca5-24bb-42e9-89d1-6bb19e4a6ccf", "record_id": "flaws_cloudtrail:0000208:4f4f5ca5-24bb-42e9-89d1-6bb19e4a6ccf", "row_index": 208, "timestamp": "2019-05-04T23:11:23Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f4f5ca5-24bb-42e9-89d1-6bb19e4a6ccf", "eventTime": "2019-05-04T23:11:23Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77b75011-d933-4233-a482-1809d46778ad", "record_id": "flaws_cloudtrail:0000209:77b75011-d933-4233-a482-1809d46778ad", "row_index": 209, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77b75011-d933-4233-a482-1809d46778ad", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ab0c468-ca8c-4ac7-8048-cfd57d077094f", "record_id": "flaws_cloudtrail:0000210:8ab0c468-ca8c-4ac7-8048-cfd57d077094f", "row_index": 210, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ab0c468-ca8c-4ac7-8048-cfd57d077094f", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dfec431-2b96-401b-89c4-240f346fd035", "record_id": "flaws_cloudtrail:0000211:2dfec431-2b96-401b-89c4-240f346fd035", "row_index": 211, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dfec431-2b96-401b-89c4-240f346fd035", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e0c16bf-ddde-4aba-8c50-09c517e35c66", "record_id": "flaws_cloudtrail:0000212:4e0c16bf-ddde-4aba-8c50-09c517e35c66", "row_index": 212, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e0c16bf-ddde-4aba-8c50-09c517e35c66", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c424e483-11b1-430b-8a3a-284cd6b56ff3", "record_id": "flaws_cloudtrail:0000213:c424e483-11b1-430b-8a3a-284cd6b56ff3", "row_index": 213, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c424e483-11b1-430b-8a3a-284cd6b56ff3", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc7c0f08-eafd-412f-a82a-0c9132f2ca3a", "record_id": "flaws_cloudtrail:0000214:dc7c0f08-eafd-412f-a82a-0c9132f2ca3a", "row_index": 214, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc7c0f08-eafd-412f-a82a-0c9132f2ca3a", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71e47934-f4f5-43d8-8527-13b2dffdf4c6", "record_id": "flaws_cloudtrail:0000215:71e47934-f4f5-43d8-8527-13b2dffdf4c6", "row_index": 215, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71e47934-f4f5-43d8-8527-13b2dffdf4c6", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08dea508-a253-48f2-ba5c-2143ac65ae7c", "record_id": "flaws_cloudtrail:0000216:08dea508-a253-48f2-ba5c-2143ac65ae7c", "row_index": 216, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08dea508-a253-48f2-ba5c-2143ac65ae7c", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e14d3ab-d36b-4139-a6ea-aec2c06fedbe", "record_id": "flaws_cloudtrail:0000217:7e14d3ab-d36b-4139-a6ea-aec2c06fedbe", "row_index": 217, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e14d3ab-d36b-4139-a6ea-aec2c06fedbe", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57d5964b-f7d4-4d70-b78c-b97f1fae2911", "record_id": "flaws_cloudtrail:0000218:57d5964b-f7d4-4d70-b78c-b97f1fae2911", "row_index": 218, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57d5964b-f7d4-4d70-b78c-b97f1fae2911", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "715792c-9c62-4d14-98dc-d94ee23d125e", "record_id": "flaws_cloudtrail:0000219:715792c-9c62-4d14-98dc-d94ee23d125e", "row_index": 219, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "715792c-9c62-4d14-98dc-d94ee23d125e", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "059c2704-5f0f-4786-8b9a-64e8ac90120c", "record_id": "flaws_cloudtrail:0000220:059c2704-5f0f-4786-8b9a-64e8ac90120c", "row_index": 220, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "059c2704-5f0f-4786-8b9a-64e8ac90120c", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "611664b-7ad5-40f6-ac4e-d3db5179d138", "record_id": "flaws_cloudtrail:0000221:611664b-7ad5-40f6-ac4e-d3db5179d138", "row_index": 221, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "611664b-7ad5-40f6-ac4e-d3db5179d138", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b608b276-6d9e-4484-8932-c8004deb9cf5", "record_id": "flaws_cloudtrail:0000222:b608b276-6d9e-4484-8932-c8004deb9cf5", "row_index": 222, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b608b276-6d9e-4484-8932-c8004deb9cf5", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77b75011-d933-4233-a482-1809d46778ad", "record_id": "flaws_cloudtrail:0000223:77b75011-d933-4233-a482-1809d46778ad", "row_index": 223, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77b75011-d933-4233-a482-1809d46778ad", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ab0c468-ca8c-4ac7-8048-cfd57d077094f", "record_id": "flaws_cloudtrail:0000224:8ab0c468-ca8c-4ac7-8048-cfd57d077094f", "row_index": 224, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ab0c468-ca8c-4ac7-8048-cfd57d077094f", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dfec431-2b96-401b-89c4-240f346fd035", "record_id": "flaws_cloudtrail:0000225:2dfec431-2b96-401b-89c4-240f346fd035", "row_index": 225, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dfec431-2b96-401b-89c4-240f346fd035", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e0c16bf-ddde-4aba-8c50-09c517e35c66", "record_id": "flaws_cloudtrail:0000226:4e0c16bf-ddde-4aba-8c50-09c517e35c66", "row_index": 226, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e0c16bf-ddde-4aba-8c50-09c517e35c66", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c424e483-11b1-430b-8a3a-284cd6b56ff3", "record_id": "flaws_cloudtrail:0000227:c424e483-11b1-430b-8a3a-284cd6b56ff3", "row_index": 227, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c424e483-11b1-430b-8a3a-284cd6b56ff3", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc7c0f08-eafd-412f-a82a-0c9132f2ca3a", "record_id": "flaws_cloudtrail:0000228:dc7c0f08-eafd-412f-a82a-0c9132f2ca3a", "row_index": 228, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc7c0f08-eafd-412f-a82a-0c9132f2ca3a", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71e47934-f4f5-43d8-8527-13b2dffdf4c6", "record_id": "flaws_cloudtrail:0000229:71e47934-f4f5-43d8-8527-13b2dffdf4c6", "row_index": 229, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71e47934-f4f5-43d8-8527-13b2dffdf4c6", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08dea508-a253-48f2-ba5c-2143ac65ae7c", "record_id": "flaws_cloudtrail:0000230:08dea508-a253-48f2-ba5c-2143ac65ae7c", "row_index": 230, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08dea508-a253-48f2-ba5c-2143ac65ae7c", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e14d3ab-d36b-4139-a6ea-aec2c06fedbe", "record_id": "flaws_cloudtrail:0000231:7e14d3ab-d36b-4139-a6ea-aec2c06fedbe", "row_index": 231, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e14d3ab-d36b-4139-a6ea-aec2c06fedbe", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57d5964b-f7d4-4d70-b78c-b97f1fae2911", "record_id": "flaws_cloudtrail:0000232:57d5964b-f7d4-4d70-b78c-b97f1fae2911", "row_index": 232, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57d5964b-f7d4-4d70-b78c-b97f1fae2911", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "715792c-9c62-4d14-98dc-d94ee23d125e", "record_id": "flaws_cloudtrail:0000233:715792c-9c62-4d14-98dc-d94ee23d125e", "row_index": 233, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "715792c-9c62-4d14-98dc-d94ee23d125e", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "059c2704-5f0f-4786-8b9a-64e8ac90120c", "record_id": "flaws_cloudtrail:0000234:059c2704-5f0f-4786-8b9a-64e8ac90120c", "row_index": 234, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "059c2704-5f0f-4786-8b9a-64e8ac90120c", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "611664b-7ad5-40f6-ac4e-d3db5179d138", "record_id": "flaws_cloudtrail:0000235:611664b-7ad5-40f6-ac4e-d3db5179d138", "row_index": 235, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "611664b-7ad5-40f6-ac4e-d3db5179d138", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b608b276-6d9e-4484-8932-c8004deb9cf5", "record_id": "flaws_cloudtrail:0000236:b608b276-6d9e-4484-8932-c8004deb9cf5", "row_index": 236, "timestamp": "2019-05-04T23:11:25Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b608b276-6d9e-4484-8932-c8004deb9cf5", "eventTime": "2019-05-04T23:11:25Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3925e5ba-e28b-4adc-88c8-a611f2a734967", "record_id": "flaws_cloudtrail:0000237:3925e5ba-e28b-4adc-88c8-a611f2a734967", "row_index": 237, "timestamp": "2019-05-04T23:11:26Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3925e5ba-e28b-4adc-88c8-a611f2a734967", "eventTime": "2019-05-04T23:11:26Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ee64d2d-ae5a-4d3c-946b-1293a39efbd1", "record_id": "flaws_cloudtrail:0000238:4ee64d2d-ae5a-4d3c-946b-1293a39efbd1", "row_index": 238, "timestamp": "2019-05-04T23:11:26Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ee64d2d-ae5a-4d3c-946b-1293a39efbd1", "eventTime": "2019-05-04T23:11:26Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efbe443a-2535-46b1-bce3-354197ed966f", "record_id": "flaws_cloudtrail:0000239:efbe443a-2535-46b1-bce3-354197ed966f", "row_index": 239, "timestamp": "2019-05-04T23:11:26Z", "event_type": "GetStackPolicy", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efbe443a-2535-46b1-bce3-354197ed966f", "eventTime": "2019-05-04T23:11:26Z", "eventName": "GetStackPolicy", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"stackName": "Summit-Route-security-assessment-access"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3925e5ba-e28b-4adc-88c8-a611f2a734967", "record_id": "flaws_cloudtrail:0000240:3925e5ba-e28b-4adc-88c8-a611f2a734967", "row_index": 240, "timestamp": "2019-05-04T23:11:26Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3925e5ba-e28b-4adc-88c8-a611f2a734967", "eventTime": "2019-05-04T23:11:26Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ee64d2d-ae5a-4d3c-946b-1293a39efbd1", "record_id": "flaws_cloudtrail:0000241:4ee64d2d-ae5a-4d3c-946b-1293a39efbd1", "row_index": 241, "timestamp": "2019-05-04T23:11:26Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ee64d2d-ae5a-4d3c-946b-1293a39efbd1", "eventTime": "2019-05-04T23:11:26Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efbe443a-2535-46b1-bce3-354197ed966f", "record_id": "flaws_cloudtrail:0000242:efbe443a-2535-46b1-bce3-354197ed966f", "row_index": 242, "timestamp": "2019-05-04T23:11:26Z", "event_type": "GetStackPolicy", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efbe443a-2535-46b1-bce3-354197ed966f", "eventTime": "2019-05-04T23:11:26Z", "eventName": "GetStackPolicy", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"stackName": "Summit-Route-security-assessment-access"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fe866ea-042d-4605-98aa-b97482856aca", "record_id": "flaws_cloudtrail:0000243:3fe866ea-042d-4605-98aa-b97482856aca", "row_index": 243, "timestamp": "2019-05-04T23:11:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fe866ea-042d-4605-98aa-b97482856aca", "eventTime": "2019-05-04T23:11:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8add449a-211d-49bb-9679-8189b6e5d0fa", "record_id": "flaws_cloudtrail:0000244:8add449a-211d-49bb-9679-8189b6e5d0fa", "row_index": 244, "timestamp": "2019-05-04T23:11:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8add449a-211d-49bb-9679-8189b6e5d0fa", "eventTime": "2019-05-04T23:11:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f620233-fb09-48fe-91bc-16f8c72f4d24", "record_id": "flaws_cloudtrail:0000245:f620233-fb09-48fe-91bc-16f8c72f4d24", "row_index": 245, "timestamp": "2019-05-04T23:11:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f620233-fb09-48fe-91bc-16f8c72f4d24", "eventTime": "2019-05-04T23:11:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebb524f9-9bbb-45a0-bc20-87484f957f", "record_id": "flaws_cloudtrail:0000246:ebb524f9-9bbb-45a0-bc20-87484f957f", "row_index": 246, "timestamp": "2019-05-04T23:11:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebb524f9-9bbb-45a0-bc20-87484f957f", "eventTime": "2019-05-04T23:11:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e4ae151-f75f-4c6e-9ea0-9aee4038ae62", "record_id": "flaws_cloudtrail:0000247:4e4ae151-f75f-4c6e-9ea0-9aee4038ae62", "row_index": 247, "timestamp": "2019-05-04T23:11:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e4ae151-f75f-4c6e-9ea0-9aee4038ae62", "eventTime": "2019-05-04T23:11:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fe866ea-042d-4605-98aa-b97482856aca", "record_id": "flaws_cloudtrail:0000248:3fe866ea-042d-4605-98aa-b97482856aca", "row_index": 248, "timestamp": "2019-05-04T23:11:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fe866ea-042d-4605-98aa-b97482856aca", "eventTime": "2019-05-04T23:11:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8add449a-211d-49bb-9679-8189b6e5d0fa", "record_id": "flaws_cloudtrail:0000249:8add449a-211d-49bb-9679-8189b6e5d0fa", "row_index": 249, "timestamp": "2019-05-04T23:11:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8add449a-211d-49bb-9679-8189b6e5d0fa", "eventTime": "2019-05-04T23:11:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f620233-fb09-48fe-91bc-16f8c72f4d24", "record_id": "flaws_cloudtrail:0000250:f620233-fb09-48fe-91bc-16f8c72f4d24", "row_index": 250, "timestamp": "2019-05-04T23:11:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f620233-fb09-48fe-91bc-16f8c72f4d24", "eventTime": "2019-05-04T23:11:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebb524f9-9bbb-45a0-bc20-87484f957f", "record_id": "flaws_cloudtrail:0000251:ebb524f9-9bbb-45a0-bc20-87484f957f", "row_index": 251, "timestamp": "2019-05-04T23:11:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebb524f9-9bbb-45a0-bc20-87484f957f", "eventTime": "2019-05-04T23:11:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e4ae151-f75f-4c6e-9ea0-9aee4038ae62", "record_id": "flaws_cloudtrail:0000252:4e4ae151-f75f-4c6e-9ea0-9aee4038ae62", "row_index": 252, "timestamp": "2019-05-04T23:11:27Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e4ae151-f75f-4c6e-9ea0-9aee4038ae62", "eventTime": "2019-05-04T23:11:27Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6c6761a-8a47-4622-a067-984ac687528dc", "record_id": "flaws_cloudtrail:0000253:e6c6761a-8a47-4622-a067-984ac687528dc", "row_index": 253, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6c6761a-8a47-4622-a067-984ac687528dc", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ddfe6cb-125f-46e2-a309-7d133568a1", "record_id": "flaws_cloudtrail:0000254:6ddfe6cb-125f-46e2-a309-7d133568a1", "row_index": 254, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ddfe6cb-125f-46e2-a309-7d133568a1", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4d4bfc3-6226-45d2-83d3-0c10c0af0994", "record_id": "flaws_cloudtrail:0000255:f4d4bfc3-6226-45d2-83d3-0c10c0af0994", "row_index": 255, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4d4bfc3-6226-45d2-83d3-0c10c0af0994", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdc7606e-67ac-496c-a56d-084b149c1f08", "record_id": "flaws_cloudtrail:0000256:bdc7606e-67ac-496c-a56d-084b149c1f08", "row_index": 256, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdc7606e-67ac-496c-a56d-084b149c1f08", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b67d855-939a-4c3b-8436-6d25ed9eff93", "record_id": "flaws_cloudtrail:0000257:6b67d855-939a-4c3b-8436-6d25ed9eff93", "row_index": 257, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b67d855-939a-4c3b-8436-6d25ed9eff93", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "431f89db-350a-4983-9d6b-f21678282b69", "record_id": "flaws_cloudtrail:0000258:431f89db-350a-4983-9d6b-f21678282b69", "row_index": 258, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "431f89db-350a-4983-9d6b-f21678282b69", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20255e67-9415-4774-bfc3-197c925797f42", "record_id": "flaws_cloudtrail:0000259:20255e67-9415-4774-bfc3-197c925797f42", "row_index": 259, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20255e67-9415-4774-bfc3-197c925797f42", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea3edadf-1ce3-42fb-bf65-018f1c5161cb", "record_id": "flaws_cloudtrail:0000260:ea3edadf-1ce3-42fb-bf65-018f1c5161cb", "row_index": 260, "timestamp": "2019-05-04T23:11:28Z", "event_type": "GetEventSelectors", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea3edadf-1ce3-42fb-bf65-018f1c5161cb", "eventTime": "2019-05-04T23:11:28Z", "eventName": "GetEventSelectors", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "errorCode": "TrailNotFoundException", "errorMessage": "Unknown trail: arn:aws:cloudtrail:us-east-1:811596193553:trail/summitroute-logs for the user: 811596193553", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"trailName": "summitroute-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "261602c-0297-4bff-8597-70f3044b8124", "record_id": "flaws_cloudtrail:0000261:261602c-0297-4bff-8597-70f3044b8124", "row_index": 261, "timestamp": "2019-05-04T23:11:28Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "261602c-0297-4bff-8597-70f3044b8124", "eventTime": "2019-05-04T23:11:28Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-east-1:745598359964:trail/summitroute-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8aa57b66-4c2c-4474-8650-6d5c49ba3c2c", "record_id": "flaws_cloudtrail:0000262:8aa57b66-4c2c-4474-8650-6d5c49ba3c2c", "row_index": 262, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8aa57b66-4c2c-4474-8650-6d5c49ba3c2c", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cb6719f-4699-47d8-b908-a32faff15b23", "record_id": "flaws_cloudtrail:0000263:2cb6719f-4699-47d8-b908-a32faff15b23", "row_index": 263, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cb6719f-4699-47d8-b908-a32faff15b23", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62ea8f76-063e-4022-8d9b-c713e225c4ec", "record_id": "flaws_cloudtrail:0000264:62ea8f76-063e-4022-8d9b-c713e225c4ec", "row_index": 264, "timestamp": "2019-05-04T23:11:28Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62ea8f76-063e-4022-8d9b-c713e225c4ec", "eventTime": "2019-05-04T23:11:28Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "632c934d-6f9f-47ef-ba0b-28083ef9838e", "record_id": "flaws_cloudtrail:0000265:632c934d-6f9f-47ef-ba0b-28083ef9838e", "row_index": 265, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "632c934d-6f9f-47ef-ba0b-28083ef9838e", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e454ee7d-9470-44c1-aed4-7de9bbb820c6", "record_id": "flaws_cloudtrail:0000266:e454ee7d-9470-44c1-aed4-7de9bbb820c6", "row_index": 266, "timestamp": "2019-05-04T23:11:28Z", "event_type": "GetEventSelectors", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e454ee7d-9470-44c1-aed4-7de9bbb820c6", "eventTime": "2019-05-04T23:11:28Z", "eventName": "GetEventSelectors", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"trailName": "cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6c6761a-8a47-4622-a067-984ac687528dc", "record_id": "flaws_cloudtrail:0000267:e6c6761a-8a47-4622-a067-984ac687528dc", "row_index": 267, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6c6761a-8a47-4622-a067-984ac687528dc", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ddfe6cb-125f-46e2-a309-7d133568a1", "record_id": "flaws_cloudtrail:0000268:6ddfe6cb-125f-46e2-a309-7d133568a1", "row_index": 268, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ddfe6cb-125f-46e2-a309-7d133568a1", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4d4bfc3-6226-45d2-83d3-0c10c0af0994", "record_id": "flaws_cloudtrail:0000269:f4d4bfc3-6226-45d2-83d3-0c10c0af0994", "row_index": 269, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4d4bfc3-6226-45d2-83d3-0c10c0af0994", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdc7606e-67ac-496c-a56d-084b149c1f08", "record_id": "flaws_cloudtrail:0000270:bdc7606e-67ac-496c-a56d-084b149c1f08", "row_index": 270, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdc7606e-67ac-496c-a56d-084b149c1f08", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b67d855-939a-4c3b-8436-6d25ed9eff93", "record_id": "flaws_cloudtrail:0000271:6b67d855-939a-4c3b-8436-6d25ed9eff93", "row_index": 271, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b67d855-939a-4c3b-8436-6d25ed9eff93", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "431f89db-350a-4983-9d6b-f21678282b69", "record_id": "flaws_cloudtrail:0000272:431f89db-350a-4983-9d6b-f21678282b69", "row_index": 272, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "431f89db-350a-4983-9d6b-f21678282b69", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20255e67-9415-4774-bfc3-197c925797f42", "record_id": "flaws_cloudtrail:0000273:20255e67-9415-4774-bfc3-197c925797f42", "row_index": 273, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20255e67-9415-4774-bfc3-197c925797f42", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea3edadf-1ce3-42fb-bf65-018f1c5161cb", "record_id": "flaws_cloudtrail:0000274:ea3edadf-1ce3-42fb-bf65-018f1c5161cb", "row_index": 274, "timestamp": "2019-05-04T23:11:28Z", "event_type": "GetEventSelectors", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea3edadf-1ce3-42fb-bf65-018f1c5161cb", "eventTime": "2019-05-04T23:11:28Z", "eventName": "GetEventSelectors", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "errorCode": "TrailNotFoundException", "errorMessage": "Unknown trail: arn:aws:cloudtrail:us-east-1:811596193553:trail/summitroute-logs for the user: 811596193553", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"trailName": "summitroute-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "261602c-0297-4bff-8597-70f3044b8124", "record_id": "flaws_cloudtrail:0000275:261602c-0297-4bff-8597-70f3044b8124", "row_index": 275, "timestamp": "2019-05-04T23:11:28Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "261602c-0297-4bff-8597-70f3044b8124", "eventTime": "2019-05-04T23:11:28Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-east-1:745598359964:trail/summitroute-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8aa57b66-4c2c-4474-8650-6d5c49ba3c2c", "record_id": "flaws_cloudtrail:0000276:8aa57b66-4c2c-4474-8650-6d5c49ba3c2c", "row_index": 276, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8aa57b66-4c2c-4474-8650-6d5c49ba3c2c", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cb6719f-4699-47d8-b908-a32faff15b23", "record_id": "flaws_cloudtrail:0000277:2cb6719f-4699-47d8-b908-a32faff15b23", "row_index": 277, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cb6719f-4699-47d8-b908-a32faff15b23", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62ea8f76-063e-4022-8d9b-c713e225c4ec", "record_id": "flaws_cloudtrail:0000278:62ea8f76-063e-4022-8d9b-c713e225c4ec", "row_index": 278, "timestamp": "2019-05-04T23:11:28Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62ea8f76-063e-4022-8d9b-c713e225c4ec", "eventTime": "2019-05-04T23:11:28Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "632c934d-6f9f-47ef-ba0b-28083ef9838e", "record_id": "flaws_cloudtrail:0000279:632c934d-6f9f-47ef-ba0b-28083ef9838e", "row_index": 279, "timestamp": "2019-05-04T23:11:28Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "632c934d-6f9f-47ef-ba0b-28083ef9838e", "eventTime": "2019-05-04T23:11:28Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e454ee7d-9470-44c1-aed4-7de9bbb820c6", "record_id": "flaws_cloudtrail:0000280:e454ee7d-9470-44c1-aed4-7de9bbb820c6", "row_index": 280, "timestamp": "2019-05-04T23:11:28Z", "event_type": "GetEventSelectors", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e454ee7d-9470-44c1-aed4-7de9bbb820c6", "eventTime": "2019-05-04T23:11:28Z", "eventName": "GetEventSelectors", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"trailName": "cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29b6f6ec-e60a-4daa-889b-0962ef3c2572", "record_id": "flaws_cloudtrail:0000281:29b6f6ec-e60a-4daa-889b-0962ef3c2572", "row_index": 281, "timestamp": "2019-05-04T23:11:29Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29b6f6ec-e60a-4daa-889b-0962ef3c2572", "eventTime": "2019-05-04T23:11:29Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29b6f6ec-e60a-4daa-889b-0962ef3c2572", "record_id": "flaws_cloudtrail:0000282:29b6f6ec-e60a-4daa-889b-0962ef3c2572", "row_index": 282, "timestamp": "2019-05-04T23:11:29Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29b6f6ec-e60a-4daa-889b-0962ef3c2572", "eventTime": "2019-05-04T23:11:29Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "144beac9-e183-42b8-a3a6-8c107f3072c3", "record_id": "flaws_cloudtrail:0000283:144beac9-e183-42b8-a3a6-8c107f3072c3", "row_index": 283, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "144beac9-e183-42b8-a3a6-8c107f3072c3", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90d8d589-869e-4781-bb03-ff65f7dd625b", "record_id": "flaws_cloudtrail:0000284:90d8d589-869e-4781-bb03-ff65f7dd625b", "row_index": 284, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90d8d589-869e-4781-bb03-ff65f7dd625b", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea748ef3-c10c-4e09-9462-ac47c152ae65", "record_id": "flaws_cloudtrail:0000285:ea748ef3-c10c-4e09-9462-ac47c152ae65", "row_index": 285, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea748ef3-c10c-4e09-9462-ac47c152ae65", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "140455a9c-4c10-4754-998b-0f7b4a1958ea", "record_id": "flaws_cloudtrail:0000286:140455a9c-4c10-4754-998b-0f7b4a1958ea", "row_index": 286, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "140455a9c-4c10-4754-998b-0f7b4a1958ea", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "021108-5f42-4cd0-9aec-c3dcaf98c389", "record_id": "flaws_cloudtrail:0000287:021108-5f42-4cd0-9aec-c3dcaf98c389", "row_index": 287, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "021108-5f42-4cd0-9aec-c3dcaf98c389", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0b611034-6018-4ec9-8315-98a418042fb9b", "record_id": "flaws_cloudtrail:0000288:d0b611034-6018-4ec9-8315-98a418042fb9b", "row_index": 288, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0b611034-6018-4ec9-8315-98a418042fb9b", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec3bab7e-0f53-4165-935d-2814a01823a4", "record_id": "flaws_cloudtrail:0000289:ec3bab7e-0f53-4165-935d-2814a01823a4", "row_index": 289, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec3bab7e-0f53-4165-935d-2814a01823a4", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbcb427e-b745-4f8a-bc93-6fac57be8bb7", "record_id": "flaws_cloudtrail:0000290:cbcb427e-b745-4f8a-bc93-6fac57be8bb7", "row_index": 290, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbcb427e-b745-4f8a-bc93-6fac57be8bb7", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fb6315a-7860-4ed3-8a11-f1151e62fbb9", "record_id": "flaws_cloudtrail:0000291:0fb6315a-7860-4ed3-8a11-f1151e62fbb9", "row_index": 291, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fb6315a-7860-4ed3-8a11-f1151e62fbb9", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09ecbab0-e2f1-4e5b-8391-3adcb96edbfb", "record_id": "flaws_cloudtrail:0000292:09ecbab0-e2f1-4e5b-8391-3adcb96edbfb", "row_index": 292, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09ecbab0-e2f1-4e5b-8391-3adcb96edbfb", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "144beac9-e183-42b8-a3a6-8c107f3072c3", "record_id": "flaws_cloudtrail:0000293:144beac9-e183-42b8-a3a6-8c107f3072c3", "row_index": 293, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "144beac9-e183-42b8-a3a6-8c107f3072c3", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90d8d589-869e-4781-bb03-ff65f7dd625b", "record_id": "flaws_cloudtrail:0000294:90d8d589-869e-4781-bb03-ff65f7dd625b", "row_index": 294, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90d8d589-869e-4781-bb03-ff65f7dd625b", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea748ef3-c10c-4e09-9462-ac47c152ae65", "record_id": "flaws_cloudtrail:0000295:ea748ef3-c10c-4e09-9462-ac47c152ae65", "row_index": 295, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea748ef3-c10c-4e09-9462-ac47c152ae65", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "140455a9c-4c10-4754-998b-0f7b4a1958ea", "record_id": "flaws_cloudtrail:0000296:140455a9c-4c10-4754-998b-0f7b4a1958ea", "row_index": 296, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "140455a9c-4c10-4754-998b-0f7b4a1958ea", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "021108-5f42-4cd0-9aec-c3dcaf98c389", "record_id": "flaws_cloudtrail:0000297:021108-5f42-4cd0-9aec-c3dcaf98c389", "row_index": 297, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "021108-5f42-4cd0-9aec-c3dcaf98c389", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0b611034-6018-4ec9-8315-98a418042fb9b", "record_id": "flaws_cloudtrail:0000298:d0b611034-6018-4ec9-8315-98a418042fb9b", "row_index": 298, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0b611034-6018-4ec9-8315-98a418042fb9b", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec3bab7e-0f53-4165-935d-2814a01823a4", "record_id": "flaws_cloudtrail:0000299:ec3bab7e-0f53-4165-935d-2814a01823a4", "row_index": 299, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec3bab7e-0f53-4165-935d-2814a01823a4", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbcb427e-b745-4f8a-bc93-6fac57be8bb7", "record_id": "flaws_cloudtrail:0000300:cbcb427e-b745-4f8a-bc93-6fac57be8bb7", "row_index": 300, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbcb427e-b745-4f8a-bc93-6fac57be8bb7", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fb6315a-7860-4ed3-8a11-f1151e62fbb9", "record_id": "flaws_cloudtrail:0000301:0fb6315a-7860-4ed3-8a11-f1151e62fbb9", "row_index": 301, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fb6315a-7860-4ed3-8a11-f1151e62fbb9", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09ecbab0-e2f1-4e5b-8391-3adcb96edbfb", "record_id": "flaws_cloudtrail:0000302:09ecbab0-e2f1-4e5b-8391-3adcb96edbfb", "row_index": 302, "timestamp": "2019-05-04T23:11:30Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09ecbab0-e2f1-4e5b-8391-3adcb96edbfb", "eventTime": "2019-05-04T23:11:30Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54dfb433-90cf-41c2-80a7-ae8c4ed3d860", "record_id": "flaws_cloudtrail:0000303:54dfb433-90cf-41c2-80a7-ae8c4ed3d860", "row_index": 303, "timestamp": "2019-05-04T23:11:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54dfb433-90cf-41c2-80a7-ae8c4ed3d860", "eventTime": "2019-05-04T23:11:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4da0ac0c-0c33-45a7-971c-9931fa9cc0d8", "record_id": "flaws_cloudtrail:0000304:4da0ac0c-0c33-45a7-971c-9931fa9cc0d8", "row_index": 304, "timestamp": "2019-05-04T23:11:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4da0ac0c-0c33-45a7-971c-9931fa9cc0d8", "eventTime": "2019-05-04T23:11:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2df106d5-275f-4e34-8723-2bb90037a7bc", "record_id": "flaws_cloudtrail:0000305:2df106d5-275f-4e34-8723-2bb90037a7bc", "row_index": 305, "timestamp": "2019-05-04T23:11:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2df106d5-275f-4e34-8723-2bb90037a7bc", "eventTime": "2019-05-04T23:11:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dce83c36-6801-4d73-b563-073bb821a72e", "record_id": "flaws_cloudtrail:0000306:dce83c36-6801-4d73-b563-073bb821a72e", "row_index": 306, "timestamp": "2019-05-04T23:11:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dce83c36-6801-4d73-b563-073bb821a72e", "eventTime": "2019-05-04T23:11:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1c789425-2d31-452a-850a-6d3b3b9370d7", "record_id": "flaws_cloudtrail:0000307:a1c789425-2d31-452a-850a-6d3b3b9370d7", "row_index": 307, "timestamp": "2019-05-04T23:11:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1c789425-2d31-452a-850a-6d3b3b9370d7", "eventTime": "2019-05-04T23:11:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ee4783e-b8e8-4124-b39b-d7053975410e", "record_id": "flaws_cloudtrail:0000308:0ee4783e-b8e8-4124-b39b-d7053975410e", "row_index": 308, "timestamp": "2019-05-04T23:11:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ee4783e-b8e8-4124-b39b-d7053975410e", "eventTime": "2019-05-04T23:11:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54dfb433-90cf-41c2-80a7-ae8c4ed3d860", "record_id": "flaws_cloudtrail:0000309:54dfb433-90cf-41c2-80a7-ae8c4ed3d860", "row_index": 309, "timestamp": "2019-05-04T23:11:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54dfb433-90cf-41c2-80a7-ae8c4ed3d860", "eventTime": "2019-05-04T23:11:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4da0ac0c-0c33-45a7-971c-9931fa9cc0d8", "record_id": "flaws_cloudtrail:0000310:4da0ac0c-0c33-45a7-971c-9931fa9cc0d8", "row_index": 310, "timestamp": "2019-05-04T23:11:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4da0ac0c-0c33-45a7-971c-9931fa9cc0d8", "eventTime": "2019-05-04T23:11:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2df106d5-275f-4e34-8723-2bb90037a7bc", "record_id": "flaws_cloudtrail:0000311:2df106d5-275f-4e34-8723-2bb90037a7bc", "row_index": 311, "timestamp": "2019-05-04T23:11:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2df106d5-275f-4e34-8723-2bb90037a7bc", "eventTime": "2019-05-04T23:11:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dce83c36-6801-4d73-b563-073bb821a72e", "record_id": "flaws_cloudtrail:0000312:dce83c36-6801-4d73-b563-073bb821a72e", "row_index": 312, "timestamp": "2019-05-04T23:11:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dce83c36-6801-4d73-b563-073bb821a72e", "eventTime": "2019-05-04T23:11:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1c789425-2d31-452a-850a-6d3b3b9370d7", "record_id": "flaws_cloudtrail:0000313:a1c789425-2d31-452a-850a-6d3b3b9370d7", "row_index": 313, "timestamp": "2019-05-04T23:11:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1c789425-2d31-452a-850a-6d3b3b9370d7", "eventTime": "2019-05-04T23:11:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ee4783e-b8e8-4124-b39b-d7053975410e", "record_id": "flaws_cloudtrail:0000314:0ee4783e-b8e8-4124-b39b-d7053975410e", "row_index": 314, "timestamp": "2019-05-04T23:11:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ee4783e-b8e8-4124-b39b-d7053975410e", "eventTime": "2019-05-04T23:11:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82400d2-8acf-41f3-9480-da415900d5", "record_id": "flaws_cloudtrail:0000315:82400d2-8acf-41f3-9480-da415900d5", "row_index": 315, "timestamp": "2019-05-04T23:11:33Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82400d2-8acf-41f3-9480-da415900d5", "eventTime": "2019-05-04T23:11:33Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d9111b4-1eeb-4d47-b2ef-7f6b949c24fd", "record_id": "flaws_cloudtrail:0000316:6d9111b4-1eeb-4d47-b2ef-7f6b949c24fd", "row_index": 316, "timestamp": "2019-05-04T23:11:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d9111b4-1eeb-4d47-b2ef-7f6b949c24fd", "eventTime": "2019-05-04T23:11:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82400d2-8acf-41f3-9480-da415900d5", "record_id": "flaws_cloudtrail:0000317:82400d2-8acf-41f3-9480-da415900d5", "row_index": 317, "timestamp": "2019-05-04T23:11:33Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82400d2-8acf-41f3-9480-da415900d5", "eventTime": "2019-05-04T23:11:33Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d9111b4-1eeb-4d47-b2ef-7f6b949c24fd", "record_id": "flaws_cloudtrail:0000318:6d9111b4-1eeb-4d47-b2ef-7f6b949c24fd", "row_index": 318, "timestamp": "2019-05-04T23:11:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d9111b4-1eeb-4d47-b2ef-7f6b949c24fd", "eventTime": "2019-05-04T23:11:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83f154df-6044-437f-b9b3-65ec62ab3594", "record_id": "flaws_cloudtrail:0000319:83f154df-6044-437f-b9b3-65ec62ab3594", "row_index": 319, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83f154df-6044-437f-b9b3-65ec62ab3594", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24f082cb-9083-4c42-a796-1ddc9cf3ed09", "record_id": "flaws_cloudtrail:0000320:24f082cb-9083-4c42-a796-1ddc9cf3ed09", "row_index": 320, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24f082cb-9083-4c42-a796-1ddc9cf3ed09", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d0b6dc9-56d3-4061-b236-c1f962c091f1", "record_id": "flaws_cloudtrail:0000321:2d0b6dc9-56d3-4061-b236-c1f962c091f1", "row_index": 321, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d0b6dc9-56d3-4061-b236-c1f962c091f1", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1cd2463-58da-4e1f-bef4-23f50c25ed3d", "record_id": "flaws_cloudtrail:0000322:e1cd2463-58da-4e1f-bef4-23f50c25ed3d", "row_index": 322, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1cd2463-58da-4e1f-bef4-23f50c25ed3d", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6d802bf-8154-4b6d-84be-72084612590e", "record_id": "flaws_cloudtrail:0000323:d6d802bf-8154-4b6d-84be-72084612590e", "row_index": 323, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6d802bf-8154-4b6d-84be-72084612590e", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d25365-afeb-43bf-8b8b-05b0f698b0be", "record_id": "flaws_cloudtrail:0000324:8d25365-afeb-43bf-8b8b-05b0f698b0be", "row_index": 324, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d25365-afeb-43bf-8b8b-05b0f698b0be", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d532955-8228-4dd6-9cfe-fc97ae5ecd87", "record_id": "flaws_cloudtrail:0000325:7d532955-8228-4dd6-9cfe-fc97ae5ecd87", "row_index": 325, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d532955-8228-4dd6-9cfe-fc97ae5ecd87", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "589bb2dd-5078-4be1-9152-77792eadcfb8", "record_id": "flaws_cloudtrail:0000326:589bb2dd-5078-4be1-9152-77792eadcfb8", "row_index": 326, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "589bb2dd-5078-4be1-9152-77792eadcfb8", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e59829-0db9-4d99-935b-69877cdc0810", "record_id": "flaws_cloudtrail:0000327:e59829-0db9-4d99-935b-69877cdc0810", "row_index": 327, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e59829-0db9-4d99-935b-69877cdc0810", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2d9dc3a-dcae-4feb-8f26-281fb30e3aa4", "record_id": "flaws_cloudtrail:0000328:c2d9dc3a-dcae-4feb-8f26-281fb30e3aa4", "row_index": 328, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2d9dc3a-dcae-4feb-8f26-281fb30e3aa4", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5798c711-92fb-4e03-9a3a-270ebe644b1a", "record_id": "flaws_cloudtrail:0000329:5798c711-92fb-4e03-9a3a-270ebe644b1a", "row_index": 329, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5798c711-92fb-4e03-9a3a-270ebe644b1a", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cdd8cbe-958d-40cd-9140-a97ff2b2c9d8", "record_id": "flaws_cloudtrail:0000330:8cdd8cbe-958d-40cd-9140-a97ff2b2c9d8", "row_index": 330, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cdd8cbe-958d-40cd-9140-a97ff2b2c9d8", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88c483d0-df7b-42b4-a025-2375ec7b3cc0", "record_id": "flaws_cloudtrail:0000331:88c483d0-df7b-42b4-a025-2375ec7b3cc0", "row_index": 331, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88c483d0-df7b-42b4-a025-2375ec7b3cc0", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62b9843f-e02a-49fa-8af4-6fe41d377b8a", "record_id": "flaws_cloudtrail:0000332:62b9843f-e02a-49fa-8af4-6fe41d377b8a", "row_index": 332, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62b9843f-e02a-49fa-8af4-6fe41d377b8a", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b2018c2-20da-4d1b-a83c-b196bee5fd86", "record_id": "flaws_cloudtrail:0000333:6b2018c2-20da-4d1b-a83c-b196bee5fd86", "row_index": 333, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b2018c2-20da-4d1b-a83c-b196bee5fd86", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83f154df-6044-437f-b9b3-65ec62ab3594", "record_id": "flaws_cloudtrail:0000334:83f154df-6044-437f-b9b3-65ec62ab3594", "row_index": 334, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83f154df-6044-437f-b9b3-65ec62ab3594", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24f082cb-9083-4c42-a796-1ddc9cf3ed09", "record_id": "flaws_cloudtrail:0000335:24f082cb-9083-4c42-a796-1ddc9cf3ed09", "row_index": 335, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24f082cb-9083-4c42-a796-1ddc9cf3ed09", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d0b6dc9-56d3-4061-b236-c1f962c091f1", "record_id": "flaws_cloudtrail:0000336:2d0b6dc9-56d3-4061-b236-c1f962c091f1", "row_index": 336, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d0b6dc9-56d3-4061-b236-c1f962c091f1", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1cd2463-58da-4e1f-bef4-23f50c25ed3d", "record_id": "flaws_cloudtrail:0000337:e1cd2463-58da-4e1f-bef4-23f50c25ed3d", "row_index": 337, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1cd2463-58da-4e1f-bef4-23f50c25ed3d", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6d802bf-8154-4b6d-84be-72084612590e", "record_id": "flaws_cloudtrail:0000338:d6d802bf-8154-4b6d-84be-72084612590e", "row_index": 338, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6d802bf-8154-4b6d-84be-72084612590e", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d25365-afeb-43bf-8b8b-05b0f698b0be", "record_id": "flaws_cloudtrail:0000339:8d25365-afeb-43bf-8b8b-05b0f698b0be", "row_index": 339, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d25365-afeb-43bf-8b8b-05b0f698b0be", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d532955-8228-4dd6-9cfe-fc97ae5ecd87", "record_id": "flaws_cloudtrail:0000340:7d532955-8228-4dd6-9cfe-fc97ae5ecd87", "row_index": 340, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d532955-8228-4dd6-9cfe-fc97ae5ecd87", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "589bb2dd-5078-4be1-9152-77792eadcfb8", "record_id": "flaws_cloudtrail:0000341:589bb2dd-5078-4be1-9152-77792eadcfb8", "row_index": 341, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "589bb2dd-5078-4be1-9152-77792eadcfb8", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e59829-0db9-4d99-935b-69877cdc0810", "record_id": "flaws_cloudtrail:0000342:e59829-0db9-4d99-935b-69877cdc0810", "row_index": 342, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e59829-0db9-4d99-935b-69877cdc0810", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2d9dc3a-dcae-4feb-8f26-281fb30e3aa4", "record_id": "flaws_cloudtrail:0000343:c2d9dc3a-dcae-4feb-8f26-281fb30e3aa4", "row_index": 343, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2d9dc3a-dcae-4feb-8f26-281fb30e3aa4", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5798c711-92fb-4e03-9a3a-270ebe644b1a", "record_id": "flaws_cloudtrail:0000344:5798c711-92fb-4e03-9a3a-270ebe644b1a", "row_index": 344, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5798c711-92fb-4e03-9a3a-270ebe644b1a", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cdd8cbe-958d-40cd-9140-a97ff2b2c9d8", "record_id": "flaws_cloudtrail:0000345:8cdd8cbe-958d-40cd-9140-a97ff2b2c9d8", "row_index": 345, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cdd8cbe-958d-40cd-9140-a97ff2b2c9d8", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88c483d0-df7b-42b4-a025-2375ec7b3cc0", "record_id": "flaws_cloudtrail:0000346:88c483d0-df7b-42b4-a025-2375ec7b3cc0", "row_index": 346, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88c483d0-df7b-42b4-a025-2375ec7b3cc0", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62b9843f-e02a-49fa-8af4-6fe41d377b8a", "record_id": "flaws_cloudtrail:0000347:62b9843f-e02a-49fa-8af4-6fe41d377b8a", "row_index": 347, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62b9843f-e02a-49fa-8af4-6fe41d377b8a", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b2018c2-20da-4d1b-a83c-b196bee5fd86", "record_id": "flaws_cloudtrail:0000348:6b2018c2-20da-4d1b-a83c-b196bee5fd86", "row_index": 348, "timestamp": "2019-05-04T23:11:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b2018c2-20da-4d1b-a83c-b196bee5fd86", "eventTime": "2019-05-04T23:11:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "414a27ed-e2fe-4d5f-817e-2c6bb6d433b9", "record_id": "flaws_cloudtrail:0000349:414a27ed-e2fe-4d5f-817e-2c6bb6d433b9", "row_index": 349, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "414a27ed-e2fe-4d5f-817e-2c6bb6d433b9", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2c178a6-6728-4357-af8b-c5a34fdb3fc2", "record_id": "flaws_cloudtrail:0000350:b2c178a6-6728-4357-af8b-c5a34fdb3fc2", "row_index": 350, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2c178a6-6728-4357-af8b-c5a34fdb3fc2", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8a153c2-8a41-49d1-9b01-0ef2f4b2efa2", "record_id": "flaws_cloudtrail:0000351:f8a153c2-8a41-49d1-9b01-0ef2f4b2efa2", "row_index": 351, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8a153c2-8a41-49d1-9b01-0ef2f4b2efa2", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25f23bd0-b485-468d-bace-2f0214b2eb81", "record_id": "flaws_cloudtrail:0000352:25f23bd0-b485-468d-bace-2f0214b2eb81", "row_index": 352, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25f23bd0-b485-468d-bace-2f0214b2eb81", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e2059cb-be41-4aa1-8bf2-66c0a125f187", "record_id": "flaws_cloudtrail:0000353:8e2059cb-be41-4aa1-8bf2-66c0a125f187", "row_index": 353, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e2059cb-be41-4aa1-8bf2-66c0a125f187", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16c6687c-929a-49d2-8ef3-384fe7cd48c1", "record_id": "flaws_cloudtrail:0000354:16c6687c-929a-49d2-8ef3-384fe7cd48c1", "row_index": 354, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16c6687c-929a-49d2-8ef3-384fe7cd48c1", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "664c7885-1ce3-47e5-9e2c-7ab846db074c", "record_id": "flaws_cloudtrail:0000355:664c7885-1ce3-47e5-9e2c-7ab846db074c", "row_index": 355, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "664c7885-1ce3-47e5-9e2c-7ab846db074c", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "425715-7fb3-46b0-b7be-d8b273d35e9b", "record_id": "flaws_cloudtrail:0000356:425715-7fb3-46b0-b7be-d8b273d35e9b", "row_index": 356, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "425715-7fb3-46b0-b7be-d8b273d35e9b", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbe3bd0f-5ac3-40cc-a9bc-55ee5239f5df", "record_id": "flaws_cloudtrail:0000357:cbe3bd0f-5ac3-40cc-a9bc-55ee5239f5df", "row_index": 357, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbe3bd0f-5ac3-40cc-a9bc-55ee5239f5df", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cc020c8-eb5d-4fd5-8a8a-bc5f4d34c91d", "record_id": "flaws_cloudtrail:0000358:4cc020c8-eb5d-4fd5-8a8a-bc5f4d34c91d", "row_index": 358, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cc020c8-eb5d-4fd5-8a8a-bc5f4d34c91d", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f41e9e59-7af6-4a5f-98e7-95ac9b359381", "record_id": "flaws_cloudtrail:0000359:f41e9e59-7af6-4a5f-98e7-95ac9b359381", "row_index": 359, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f41e9e59-7af6-4a5f-98e7-95ac9b359381", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b97baebd-a1f2-4e68-b379-52c0c406822c", "record_id": "flaws_cloudtrail:0000360:b97baebd-a1f2-4e68-b379-52c0c406822c", "row_index": 360, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b97baebd-a1f2-4e68-b379-52c0c406822c", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad4006bf-31b9-4e2d-bf69-77e732172d25", "record_id": "flaws_cloudtrail:0000361:ad4006bf-31b9-4e2d-bf69-77e732172d25", "row_index": 361, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad4006bf-31b9-4e2d-bf69-77e732172d25", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aeaf915-8a9b-489d-9ba0-ada57c2327d8", "record_id": "flaws_cloudtrail:0000362:6aeaf915-8a9b-489d-9ba0-ada57c2327d8", "row_index": 362, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aeaf915-8a9b-489d-9ba0-ada57c2327d8", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42be8800-9174-4805-8563-e57a645709d", "record_id": "flaws_cloudtrail:0000363:42be8800-9174-4805-8563-e57a645709d", "row_index": 363, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42be8800-9174-4805-8563-e57a645709d", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cf6437e-1627-4154-b37e-cedd8c6ba79e", "record_id": "flaws_cloudtrail:0000364:2cf6437e-1627-4154-b37e-cedd8c6ba79e", "row_index": 364, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cf6437e-1627-4154-b37e-cedd8c6ba79e", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55b3e732-e14b-43a5-8248-a611757", "record_id": "flaws_cloudtrail:0000365:55b3e732-e14b-43a5-8248-a611757", "row_index": 365, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55b3e732-e14b-43a5-8248-a611757", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b82692-0c96-4656-8f69-53909f647468", "record_id": "flaws_cloudtrail:0000366:b82692-0c96-4656-8f69-53909f647468", "row_index": 366, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b82692-0c96-4656-8f69-53909f647468", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0e3607b-5b53-4828-87f9-2c84ba395ab2", "record_id": "flaws_cloudtrail:0000367:d0e3607b-5b53-4828-87f9-2c84ba395ab2", "row_index": 367, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0e3607b-5b53-4828-87f9-2c84ba395ab2", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "643649e30-7590-48e4-88e9-e3e6c1065a85", "record_id": "flaws_cloudtrail:0000368:643649e30-7590-48e4-88e9-e3e6c1065a85", "row_index": 368, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "643649e30-7590-48e4-88e9-e3e6c1065a85", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e29cdb3e-61e4-4b35-849d-4688577a6013", "record_id": "flaws_cloudtrail:0000369:e29cdb3e-61e4-4b35-849d-4688577a6013", "row_index": 369, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e29cdb3e-61e4-4b35-849d-4688577a6013", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c377894d-63dd-4946-90f8-b40f68bef8b2", "record_id": "flaws_cloudtrail:0000370:0c377894d-63dd-4946-90f8-b40f68bef8b2", "row_index": 370, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c377894d-63dd-4946-90f8-b40f68bef8b2", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1328b4b-4258-4f9b-b1a9-7d8276c948df", "record_id": "flaws_cloudtrail:0000371:b1328b4b-4258-4f9b-b1a9-7d8276c948df", "row_index": 371, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1328b4b-4258-4f9b-b1a9-7d8276c948df", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7453d879-d89a-4834-b8b8-a4fef42af052", "record_id": "flaws_cloudtrail:0000372:7453d879-d89a-4834-b8b8-a4fef42af052", "row_index": 372, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7453d879-d89a-4834-b8b8-a4fef42af052", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0597f106-8ddd-4d94-9226-70d9c6d3f351", "record_id": "flaws_cloudtrail:0000373:0597f106-8ddd-4d94-9226-70d9c6d3f351", "row_index": 373, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0597f106-8ddd-4d94-9226-70d9c6d3f351", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "414a27ed-e2fe-4d5f-817e-2c6bb6d433b9", "record_id": "flaws_cloudtrail:0000374:414a27ed-e2fe-4d5f-817e-2c6bb6d433b9", "row_index": 374, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "414a27ed-e2fe-4d5f-817e-2c6bb6d433b9", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2c178a6-6728-4357-af8b-c5a34fdb3fc2", "record_id": "flaws_cloudtrail:0000375:b2c178a6-6728-4357-af8b-c5a34fdb3fc2", "row_index": 375, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2c178a6-6728-4357-af8b-c5a34fdb3fc2", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8a153c2-8a41-49d1-9b01-0ef2f4b2efa2", "record_id": "flaws_cloudtrail:0000376:f8a153c2-8a41-49d1-9b01-0ef2f4b2efa2", "row_index": 376, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8a153c2-8a41-49d1-9b01-0ef2f4b2efa2", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25f23bd0-b485-468d-bace-2f0214b2eb81", "record_id": "flaws_cloudtrail:0000377:25f23bd0-b485-468d-bace-2f0214b2eb81", "row_index": 377, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25f23bd0-b485-468d-bace-2f0214b2eb81", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e2059cb-be41-4aa1-8bf2-66c0a125f187", "record_id": "flaws_cloudtrail:0000378:8e2059cb-be41-4aa1-8bf2-66c0a125f187", "row_index": 378, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e2059cb-be41-4aa1-8bf2-66c0a125f187", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16c6687c-929a-49d2-8ef3-384fe7cd48c1", "record_id": "flaws_cloudtrail:0000379:16c6687c-929a-49d2-8ef3-384fe7cd48c1", "row_index": 379, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16c6687c-929a-49d2-8ef3-384fe7cd48c1", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "664c7885-1ce3-47e5-9e2c-7ab846db074c", "record_id": "flaws_cloudtrail:0000380:664c7885-1ce3-47e5-9e2c-7ab846db074c", "row_index": 380, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "664c7885-1ce3-47e5-9e2c-7ab846db074c", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "425715-7fb3-46b0-b7be-d8b273d35e9b", "record_id": "flaws_cloudtrail:0000381:425715-7fb3-46b0-b7be-d8b273d35e9b", "row_index": 381, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "425715-7fb3-46b0-b7be-d8b273d35e9b", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbe3bd0f-5ac3-40cc-a9bc-55ee5239f5df", "record_id": "flaws_cloudtrail:0000382:cbe3bd0f-5ac3-40cc-a9bc-55ee5239f5df", "row_index": 382, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbe3bd0f-5ac3-40cc-a9bc-55ee5239f5df", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cc020c8-eb5d-4fd5-8a8a-bc5f4d34c91d", "record_id": "flaws_cloudtrail:0000383:4cc020c8-eb5d-4fd5-8a8a-bc5f4d34c91d", "row_index": 383, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cc020c8-eb5d-4fd5-8a8a-bc5f4d34c91d", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f41e9e59-7af6-4a5f-98e7-95ac9b359381", "record_id": "flaws_cloudtrail:0000384:f41e9e59-7af6-4a5f-98e7-95ac9b359381", "row_index": 384, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f41e9e59-7af6-4a5f-98e7-95ac9b359381", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b97baebd-a1f2-4e68-b379-52c0c406822c", "record_id": "flaws_cloudtrail:0000385:b97baebd-a1f2-4e68-b379-52c0c406822c", "row_index": 385, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b97baebd-a1f2-4e68-b379-52c0c406822c", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad4006bf-31b9-4e2d-bf69-77e732172d25", "record_id": "flaws_cloudtrail:0000386:ad4006bf-31b9-4e2d-bf69-77e732172d25", "row_index": 386, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad4006bf-31b9-4e2d-bf69-77e732172d25", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aeaf915-8a9b-489d-9ba0-ada57c2327d8", "record_id": "flaws_cloudtrail:0000387:6aeaf915-8a9b-489d-9ba0-ada57c2327d8", "row_index": 387, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aeaf915-8a9b-489d-9ba0-ada57c2327d8", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42be8800-9174-4805-8563-e57a645709d", "record_id": "flaws_cloudtrail:0000388:42be8800-9174-4805-8563-e57a645709d", "row_index": 388, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42be8800-9174-4805-8563-e57a645709d", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cf6437e-1627-4154-b37e-cedd8c6ba79e", "record_id": "flaws_cloudtrail:0000389:2cf6437e-1627-4154-b37e-cedd8c6ba79e", "row_index": 389, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cf6437e-1627-4154-b37e-cedd8c6ba79e", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55b3e732-e14b-43a5-8248-a611757", "record_id": "flaws_cloudtrail:0000390:55b3e732-e14b-43a5-8248-a611757", "row_index": 390, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55b3e732-e14b-43a5-8248-a611757", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b82692-0c96-4656-8f69-53909f647468", "record_id": "flaws_cloudtrail:0000391:b82692-0c96-4656-8f69-53909f647468", "row_index": 391, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b82692-0c96-4656-8f69-53909f647468", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0e3607b-5b53-4828-87f9-2c84ba395ab2", "record_id": "flaws_cloudtrail:0000392:d0e3607b-5b53-4828-87f9-2c84ba395ab2", "row_index": 392, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0e3607b-5b53-4828-87f9-2c84ba395ab2", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "643649e30-7590-48e4-88e9-e3e6c1065a85", "record_id": "flaws_cloudtrail:0000393:643649e30-7590-48e4-88e9-e3e6c1065a85", "row_index": 393, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "643649e30-7590-48e4-88e9-e3e6c1065a85", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e29cdb3e-61e4-4b35-849d-4688577a6013", "record_id": "flaws_cloudtrail:0000394:e29cdb3e-61e4-4b35-849d-4688577a6013", "row_index": 394, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e29cdb3e-61e4-4b35-849d-4688577a6013", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c377894d-63dd-4946-90f8-b40f68bef8b2", "record_id": "flaws_cloudtrail:0000395:0c377894d-63dd-4946-90f8-b40f68bef8b2", "row_index": 395, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c377894d-63dd-4946-90f8-b40f68bef8b2", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1328b4b-4258-4f9b-b1a9-7d8276c948df", "record_id": "flaws_cloudtrail:0000396:b1328b4b-4258-4f9b-b1a9-7d8276c948df", "row_index": 396, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1328b4b-4258-4f9b-b1a9-7d8276c948df", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7453d879-d89a-4834-b8b8-a4fef42af052", "record_id": "flaws_cloudtrail:0000397:7453d879-d89a-4834-b8b8-a4fef42af052", "row_index": 397, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7453d879-d89a-4834-b8b8-a4fef42af052", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0597f106-8ddd-4d94-9226-70d9c6d3f351", "record_id": "flaws_cloudtrail:0000398:0597f106-8ddd-4d94-9226-70d9c6d3f351", "row_index": 398, "timestamp": "2019-05-04T23:11:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0597f106-8ddd-4d94-9226-70d9c6d3f351", "eventTime": "2019-05-04T23:11:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b659bd0b-a4f7-47bc-8937-348362ff2182c", "record_id": "flaws_cloudtrail:0000399:b659bd0b-a4f7-47bc-8937-348362ff2182c", "row_index": 399, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b659bd0b-a4f7-47bc-8937-348362ff2182c", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0a8634b-44f4-4bd5-b846-6b4cb6f82b82", "record_id": "flaws_cloudtrail:0000400:e0a8634b-44f4-4bd5-b846-6b4cb6f82b82", "row_index": 400, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0a8634b-44f4-4bd5-b846-6b4cb6f82b82", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed20e6f7-1688-4bf3-8fe2-e55b07a14a94", "record_id": "flaws_cloudtrail:0000401:ed20e6f7-1688-4bf3-8fe2-e55b07a14a94", "row_index": 401, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed20e6f7-1688-4bf3-8fe2-e55b07a14a94", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "884b21b1-91cf-4e4b-87bc-3f6b031cdaf8", "record_id": "flaws_cloudtrail:0000402:884b21b1-91cf-4e4b-87bc-3f6b031cdaf8", "row_index": 402, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "884b21b1-91cf-4e4b-87bc-3f6b031cdaf8", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ec04fbf-f80c-4c28-8c29-8ad04e13f8ca", "record_id": "flaws_cloudtrail:0000403:1ec04fbf-f80c-4c28-8c29-8ad04e13f8ca", "row_index": 403, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ec04fbf-f80c-4c28-8c29-8ad04e13f8ca", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1484dee1-9d37-45d2-8423-7a528d7e5c81", "record_id": "flaws_cloudtrail:0000404:1484dee1-9d37-45d2-8423-7a528d7e5c81", "row_index": 404, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1484dee1-9d37-45d2-8423-7a528d7e5c81", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82ed0c5d-73ee-4ac3-9728-095725d9001c", "record_id": "flaws_cloudtrail:0000405:82ed0c5d-73ee-4ac3-9728-095725d9001c", "row_index": 405, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82ed0c5d-73ee-4ac3-9728-095725d9001c", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9164dcd5-135b-423c-8a6f-f0395f3bfa4b", "record_id": "flaws_cloudtrail:0000406:9164dcd5-135b-423c-8a6f-f0395f3bfa4b", "row_index": 406, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9164dcd5-135b-423c-8a6f-f0395f3bfa4b", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bb937605-2d63-4547-996f-16aa5d471335", "record_id": "flaws_cloudtrail:0000407:4bb937605-2d63-4547-996f-16aa5d471335", "row_index": 407, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bb937605-2d63-4547-996f-16aa5d471335", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "870571bc5-0a7a-468a-a7cd-27e3c1de4c3b", "record_id": "flaws_cloudtrail:0000408:870571bc5-0a7a-468a-a7cd-27e3c1de4c3b", "row_index": 408, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "870571bc5-0a7a-468a-a7cd-27e3c1de4c3b", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06d8e4f3-c81a-4d6c-9d80-3e47ad78172e", "record_id": "flaws_cloudtrail:0000409:06d8e4f3-c81a-4d6c-9d80-3e47ad78172e", "row_index": 409, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06d8e4f3-c81a-4d6c-9d80-3e47ad78172e", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b352190-42de-4c3e-9d3e-8432276a5783", "record_id": "flaws_cloudtrail:0000410:b352190-42de-4c3e-9d3e-8432276a5783", "row_index": 410, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b352190-42de-4c3e-9d3e-8432276a5783", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03beaa34-f08b-4d25-984e-97256cabf6d1", "record_id": "flaws_cloudtrail:0000411:03beaa34-f08b-4d25-984e-97256cabf6d1", "row_index": 411, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03beaa34-f08b-4d25-984e-97256cabf6d1", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08649e4f-8503-4364-9f03-9371bbf34236", "record_id": "flaws_cloudtrail:0000412:08649e4f-8503-4364-9f03-9371bbf34236", "row_index": 412, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08649e4f-8503-4364-9f03-9371bbf34236", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffe375ce-5702-46e2-a9cb-28fd8f8399c0", "record_id": "flaws_cloudtrail:0000413:ffe375ce-5702-46e2-a9cb-28fd8f8399c0", "row_index": 413, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffe375ce-5702-46e2-a9cb-28fd8f8399c0", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "facc2f17-eb18-4e89-a1b5-b438754c66e1", "record_id": "flaws_cloudtrail:0000414:facc2f17-eb18-4e89-a1b5-b438754c66e1", "row_index": 414, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "facc2f17-eb18-4e89-a1b5-b438754c66e1", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0aafe77b-4f3d-430d-a614-70abb7b90b36", "record_id": "flaws_cloudtrail:0000415:0aafe77b-4f3d-430d-a614-70abb7b90b36", "row_index": 415, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0aafe77b-4f3d-430d-a614-70abb7b90b36", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43411b-89f8-42ba-97ac-d3b19e75e6bf", "record_id": "flaws_cloudtrail:0000416:43411b-89f8-42ba-97ac-d3b19e75e6bf", "row_index": 416, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43411b-89f8-42ba-97ac-d3b19e75e6bf", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a9c733e-0856-4096-b7bd-d13fe095e33e", "record_id": "flaws_cloudtrail:0000417:0a9c733e-0856-4096-b7bd-d13fe095e33e", "row_index": 417, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a9c733e-0856-4096-b7bd-d13fe095e33e", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54a5b9b5-5422-4d63-9058-08e33bc20888", "record_id": "flaws_cloudtrail:0000418:54a5b9b5-5422-4d63-9058-08e33bc20888", "row_index": 418, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54a5b9b5-5422-4d63-9058-08e33bc20888", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9b2284c-1d1f-4af1-a6e0-b3bfae5b5c20", "record_id": "flaws_cloudtrail:0000419:c9b2284c-1d1f-4af1-a6e0-b3bfae5b5c20", "row_index": 419, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9b2284c-1d1f-4af1-a6e0-b3bfae5b5c20", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffaf0b64-be98-458e-b32a-6cc1a58633a7", "record_id": "flaws_cloudtrail:0000420:ffaf0b64-be98-458e-b32a-6cc1a58633a7", "row_index": 420, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffaf0b64-be98-458e-b32a-6cc1a58633a7", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b439633a-6db0-4e62-832a-78f23af6b9ca", "record_id": "flaws_cloudtrail:0000421:b439633a-6db0-4e62-832a-78f23af6b9ca", "row_index": 421, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b439633a-6db0-4e62-832a-78f23af6b9ca", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55535ab-9af2-407f-b73b-2a3af01f7973", "record_id": "flaws_cloudtrail:0000422:55535ab-9af2-407f-b73b-2a3af01f7973", "row_index": 422, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55535ab-9af2-407f-b73b-2a3af01f7973", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31276-7a6f-462f-9d61-787f23ade5bc", "record_id": "flaws_cloudtrail:0000423:31276-7a6f-462f-9d61-787f23ade5bc", "row_index": 423, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31276-7a6f-462f-9d61-787f23ade5bc", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b659bd0b-a4f7-47bc-8937-348362ff2182c", "record_id": "flaws_cloudtrail:0000424:b659bd0b-a4f7-47bc-8937-348362ff2182c", "row_index": 424, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b659bd0b-a4f7-47bc-8937-348362ff2182c", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0a8634b-44f4-4bd5-b846-6b4cb6f82b82", "record_id": "flaws_cloudtrail:0000425:e0a8634b-44f4-4bd5-b846-6b4cb6f82b82", "row_index": 425, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0a8634b-44f4-4bd5-b846-6b4cb6f82b82", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed20e6f7-1688-4bf3-8fe2-e55b07a14a94", "record_id": "flaws_cloudtrail:0000426:ed20e6f7-1688-4bf3-8fe2-e55b07a14a94", "row_index": 426, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed20e6f7-1688-4bf3-8fe2-e55b07a14a94", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "884b21b1-91cf-4e4b-87bc-3f6b031cdaf8", "record_id": "flaws_cloudtrail:0000427:884b21b1-91cf-4e4b-87bc-3f6b031cdaf8", "row_index": 427, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "884b21b1-91cf-4e4b-87bc-3f6b031cdaf8", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ec04fbf-f80c-4c28-8c29-8ad04e13f8ca", "record_id": "flaws_cloudtrail:0000428:1ec04fbf-f80c-4c28-8c29-8ad04e13f8ca", "row_index": 428, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ec04fbf-f80c-4c28-8c29-8ad04e13f8ca", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1484dee1-9d37-45d2-8423-7a528d7e5c81", "record_id": "flaws_cloudtrail:0000429:1484dee1-9d37-45d2-8423-7a528d7e5c81", "row_index": 429, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1484dee1-9d37-45d2-8423-7a528d7e5c81", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82ed0c5d-73ee-4ac3-9728-095725d9001c", "record_id": "flaws_cloudtrail:0000430:82ed0c5d-73ee-4ac3-9728-095725d9001c", "row_index": 430, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82ed0c5d-73ee-4ac3-9728-095725d9001c", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9164dcd5-135b-423c-8a6f-f0395f3bfa4b", "record_id": "flaws_cloudtrail:0000431:9164dcd5-135b-423c-8a6f-f0395f3bfa4b", "row_index": 431, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9164dcd5-135b-423c-8a6f-f0395f3bfa4b", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bb937605-2d63-4547-996f-16aa5d471335", "record_id": "flaws_cloudtrail:0000432:4bb937605-2d63-4547-996f-16aa5d471335", "row_index": 432, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bb937605-2d63-4547-996f-16aa5d471335", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "870571bc5-0a7a-468a-a7cd-27e3c1de4c3b", "record_id": "flaws_cloudtrail:0000433:870571bc5-0a7a-468a-a7cd-27e3c1de4c3b", "row_index": 433, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "870571bc5-0a7a-468a-a7cd-27e3c1de4c3b", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06d8e4f3-c81a-4d6c-9d80-3e47ad78172e", "record_id": "flaws_cloudtrail:0000434:06d8e4f3-c81a-4d6c-9d80-3e47ad78172e", "row_index": 434, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06d8e4f3-c81a-4d6c-9d80-3e47ad78172e", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b352190-42de-4c3e-9d3e-8432276a5783", "record_id": "flaws_cloudtrail:0000435:b352190-42de-4c3e-9d3e-8432276a5783", "row_index": 435, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b352190-42de-4c3e-9d3e-8432276a5783", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03beaa34-f08b-4d25-984e-97256cabf6d1", "record_id": "flaws_cloudtrail:0000436:03beaa34-f08b-4d25-984e-97256cabf6d1", "row_index": 436, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03beaa34-f08b-4d25-984e-97256cabf6d1", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08649e4f-8503-4364-9f03-9371bbf34236", "record_id": "flaws_cloudtrail:0000437:08649e4f-8503-4364-9f03-9371bbf34236", "row_index": 437, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08649e4f-8503-4364-9f03-9371bbf34236", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffe375ce-5702-46e2-a9cb-28fd8f8399c0", "record_id": "flaws_cloudtrail:0000438:ffe375ce-5702-46e2-a9cb-28fd8f8399c0", "row_index": 438, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffe375ce-5702-46e2-a9cb-28fd8f8399c0", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "facc2f17-eb18-4e89-a1b5-b438754c66e1", "record_id": "flaws_cloudtrail:0000439:facc2f17-eb18-4e89-a1b5-b438754c66e1", "row_index": 439, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "facc2f17-eb18-4e89-a1b5-b438754c66e1", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0aafe77b-4f3d-430d-a614-70abb7b90b36", "record_id": "flaws_cloudtrail:0000440:0aafe77b-4f3d-430d-a614-70abb7b90b36", "row_index": 440, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0aafe77b-4f3d-430d-a614-70abb7b90b36", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43411b-89f8-42ba-97ac-d3b19e75e6bf", "record_id": "flaws_cloudtrail:0000441:43411b-89f8-42ba-97ac-d3b19e75e6bf", "row_index": 441, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43411b-89f8-42ba-97ac-d3b19e75e6bf", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a9c733e-0856-4096-b7bd-d13fe095e33e", "record_id": "flaws_cloudtrail:0000442:0a9c733e-0856-4096-b7bd-d13fe095e33e", "row_index": 442, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a9c733e-0856-4096-b7bd-d13fe095e33e", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54a5b9b5-5422-4d63-9058-08e33bc20888", "record_id": "flaws_cloudtrail:0000443:54a5b9b5-5422-4d63-9058-08e33bc20888", "row_index": 443, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54a5b9b5-5422-4d63-9058-08e33bc20888", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9b2284c-1d1f-4af1-a6e0-b3bfae5b5c20", "record_id": "flaws_cloudtrail:0000444:c9b2284c-1d1f-4af1-a6e0-b3bfae5b5c20", "row_index": 444, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9b2284c-1d1f-4af1-a6e0-b3bfae5b5c20", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffaf0b64-be98-458e-b32a-6cc1a58633a7", "record_id": "flaws_cloudtrail:0000445:ffaf0b64-be98-458e-b32a-6cc1a58633a7", "row_index": 445, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffaf0b64-be98-458e-b32a-6cc1a58633a7", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b439633a-6db0-4e62-832a-78f23af6b9ca", "record_id": "flaws_cloudtrail:0000446:b439633a-6db0-4e62-832a-78f23af6b9ca", "row_index": 446, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b439633a-6db0-4e62-832a-78f23af6b9ca", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55535ab-9af2-407f-b73b-2a3af01f7973", "record_id": "flaws_cloudtrail:0000447:55535ab-9af2-407f-b73b-2a3af01f7973", "row_index": 447, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55535ab-9af2-407f-b73b-2a3af01f7973", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31276-7a6f-462f-9d61-787f23ade5bc", "record_id": "flaws_cloudtrail:0000448:31276-7a6f-462f-9d61-787f23ade5bc", "row_index": 448, "timestamp": "2019-05-04T23:11:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31276-7a6f-462f-9d61-787f23ade5bc", "eventTime": "2019-05-04T23:11:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e43e4dee-94f5-4faf-b9ba-fd09541f399e", "record_id": "flaws_cloudtrail:0000449:e43e4dee-94f5-4faf-b9ba-fd09541f399e", "row_index": 449, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e43e4dee-94f5-4faf-b9ba-fd09541f399e", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52b9a7cd-0066-4e3a-bbbe-ef5cb85257aa", "record_id": "flaws_cloudtrail:0000450:52b9a7cd-0066-4e3a-bbbe-ef5cb85257aa", "row_index": 450, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52b9a7cd-0066-4e3a-bbbe-ef5cb85257aa", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d174c249-28ac-47df-9ebf-30d79f6c89a5", "record_id": "flaws_cloudtrail:0000451:d174c249-28ac-47df-9ebf-30d79f6c89a5", "row_index": 451, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d174c249-28ac-47df-9ebf-30d79f6c89a5", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72f2e42a-9521-42e1-909a-7d1abb0c9cbb", "record_id": "flaws_cloudtrail:0000452:72f2e42a-9521-42e1-909a-7d1abb0c9cbb", "row_index": 452, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72f2e42a-9521-42e1-909a-7d1abb0c9cbb", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "553d01eb-8b24-41cb-bb41-542f550e1428", "record_id": "flaws_cloudtrail:0000453:553d01eb-8b24-41cb-bb41-542f550e1428", "row_index": 453, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "553d01eb-8b24-41cb-bb41-542f550e1428", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff641450f-1d42-4588-a270-20eefeb52dd4", "record_id": "flaws_cloudtrail:0000454:ff641450f-1d42-4588-a270-20eefeb52dd4", "row_index": 454, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff641450f-1d42-4588-a270-20eefeb52dd4", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54b4736f-58b1-4849-8373-9f8630c174ea", "record_id": "flaws_cloudtrail:0000455:54b4736f-58b1-4849-8373-9f8630c174ea", "row_index": 455, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54b4736f-58b1-4849-8373-9f8630c174ea", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "818b47e7-8590-4e5b-8787-ba454235b394d", "record_id": "flaws_cloudtrail:0000456:818b47e7-8590-4e5b-8787-ba454235b394d", "row_index": 456, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "818b47e7-8590-4e5b-8787-ba454235b394d", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "303c09c6-5166-4497-9a34-499f09c36cc5", "record_id": "flaws_cloudtrail:0000457:303c09c6-5166-4497-9a34-499f09c36cc5", "row_index": 457, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "303c09c6-5166-4497-9a34-499f09c36cc5", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2be0752-13a9-48a3-bc8a-92d0bec29d7b", "record_id": "flaws_cloudtrail:0000458:c2be0752-13a9-48a3-bc8a-92d0bec29d7b", "row_index": 458, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2be0752-13a9-48a3-bc8a-92d0bec29d7b", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24ec06b7-1ba5-4468-8651-938296acedd", "record_id": "flaws_cloudtrail:0000459:24ec06b7-1ba5-4468-8651-938296acedd", "row_index": 459, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24ec06b7-1ba5-4468-8651-938296acedd", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7040bbb3-fcbb-486b-88a4-5d774ae28b97", "record_id": "flaws_cloudtrail:0000460:7040bbb3-fcbb-486b-88a4-5d774ae28b97", "row_index": 460, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7040bbb3-fcbb-486b-88a4-5d774ae28b97", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2cd4bf6-c6cc-4342-b58c-354ed48842ab", "record_id": "flaws_cloudtrail:0000461:e2cd4bf6-c6cc-4342-b58c-354ed48842ab", "row_index": 461, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2cd4bf6-c6cc-4342-b58c-354ed48842ab", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4745c0d-0d1c-49be-a8c9-876b92bba3c4", "record_id": "flaws_cloudtrail:0000462:c4745c0d-0d1c-49be-a8c9-876b92bba3c4", "row_index": 462, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4745c0d-0d1c-49be-a8c9-876b92bba3c4", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecca9389-8ae3-4de8-8d7f-19087c314e8e", "record_id": "flaws_cloudtrail:0000463:ecca9389-8ae3-4de8-8d7f-19087c314e8e", "row_index": 463, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecca9389-8ae3-4de8-8d7f-19087c314e8e", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e43e4dee-94f5-4faf-b9ba-fd09541f399e", "record_id": "flaws_cloudtrail:0000464:e43e4dee-94f5-4faf-b9ba-fd09541f399e", "row_index": 464, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e43e4dee-94f5-4faf-b9ba-fd09541f399e", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52b9a7cd-0066-4e3a-bbbe-ef5cb85257aa", "record_id": "flaws_cloudtrail:0000465:52b9a7cd-0066-4e3a-bbbe-ef5cb85257aa", "row_index": 465, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52b9a7cd-0066-4e3a-bbbe-ef5cb85257aa", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d174c249-28ac-47df-9ebf-30d79f6c89a5", "record_id": "flaws_cloudtrail:0000466:d174c249-28ac-47df-9ebf-30d79f6c89a5", "row_index": 466, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d174c249-28ac-47df-9ebf-30d79f6c89a5", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72f2e42a-9521-42e1-909a-7d1abb0c9cbb", "record_id": "flaws_cloudtrail:0000467:72f2e42a-9521-42e1-909a-7d1abb0c9cbb", "row_index": 467, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72f2e42a-9521-42e1-909a-7d1abb0c9cbb", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "553d01eb-8b24-41cb-bb41-542f550e1428", "record_id": "flaws_cloudtrail:0000468:553d01eb-8b24-41cb-bb41-542f550e1428", "row_index": 468, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "553d01eb-8b24-41cb-bb41-542f550e1428", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff641450f-1d42-4588-a270-20eefeb52dd4", "record_id": "flaws_cloudtrail:0000469:ff641450f-1d42-4588-a270-20eefeb52dd4", "row_index": 469, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff641450f-1d42-4588-a270-20eefeb52dd4", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54b4736f-58b1-4849-8373-9f8630c174ea", "record_id": "flaws_cloudtrail:0000470:54b4736f-58b1-4849-8373-9f8630c174ea", "row_index": 470, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54b4736f-58b1-4849-8373-9f8630c174ea", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "818b47e7-8590-4e5b-8787-ba454235b394d", "record_id": "flaws_cloudtrail:0000471:818b47e7-8590-4e5b-8787-ba454235b394d", "row_index": 471, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "818b47e7-8590-4e5b-8787-ba454235b394d", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "303c09c6-5166-4497-9a34-499f09c36cc5", "record_id": "flaws_cloudtrail:0000472:303c09c6-5166-4497-9a34-499f09c36cc5", "row_index": 472, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "303c09c6-5166-4497-9a34-499f09c36cc5", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2be0752-13a9-48a3-bc8a-92d0bec29d7b", "record_id": "flaws_cloudtrail:0000473:c2be0752-13a9-48a3-bc8a-92d0bec29d7b", "row_index": 473, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2be0752-13a9-48a3-bc8a-92d0bec29d7b", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24ec06b7-1ba5-4468-8651-938296acedd", "record_id": "flaws_cloudtrail:0000474:24ec06b7-1ba5-4468-8651-938296acedd", "row_index": 474, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24ec06b7-1ba5-4468-8651-938296acedd", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7040bbb3-fcbb-486b-88a4-5d774ae28b97", "record_id": "flaws_cloudtrail:0000475:7040bbb3-fcbb-486b-88a4-5d774ae28b97", "row_index": 475, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7040bbb3-fcbb-486b-88a4-5d774ae28b97", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2cd4bf6-c6cc-4342-b58c-354ed48842ab", "record_id": "flaws_cloudtrail:0000476:e2cd4bf6-c6cc-4342-b58c-354ed48842ab", "row_index": 476, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2cd4bf6-c6cc-4342-b58c-354ed48842ab", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4745c0d-0d1c-49be-a8c9-876b92bba3c4", "record_id": "flaws_cloudtrail:0000477:c4745c0d-0d1c-49be-a8c9-876b92bba3c4", "row_index": 477, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4745c0d-0d1c-49be-a8c9-876b92bba3c4", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecca9389-8ae3-4de8-8d7f-19087c314e8e", "record_id": "flaws_cloudtrail:0000478:ecca9389-8ae3-4de8-8d7f-19087c314e8e", "row_index": 478, "timestamp": "2019-05-04T23:11:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecca9389-8ae3-4de8-8d7f-19087c314e8e", "eventTime": "2019-05-04T23:11:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d424d4b-e694-4a39-b8eb-dd09fbc0d753", "record_id": "flaws_cloudtrail:0000479:1d424d4b-e694-4a39-b8eb-dd09fbc0d753", "row_index": 479, "timestamp": "2019-05-04T23:11:39Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d424d4b-e694-4a39-b8eb-dd09fbc0d753", "eventTime": "2019-05-04T23:11:39Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d424d4b-e694-4a39-b8eb-dd09fbc0d753", "record_id": "flaws_cloudtrail:0000480:1d424d4b-e694-4a39-b8eb-dd09fbc0d753", "row_index": 480, "timestamp": "2019-05-04T23:11:39Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d424d4b-e694-4a39-b8eb-dd09fbc0d753", "eventTime": "2019-05-04T23:11:39Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49d0d48a-aec7-441b-b031-f1a574593e", "record_id": "flaws_cloudtrail:0000481:49d0d48a-aec7-441b-b031-f1a574593e", "row_index": 481, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49d0d48a-aec7-441b-b031-f1a574593e", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3655c94-1f4e-4d0a-a238-082b94233f7", "record_id": "flaws_cloudtrail:0000482:e3655c94-1f4e-4d0a-a238-082b94233f7", "row_index": 482, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3655c94-1f4e-4d0a-a238-082b94233f7", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d522e5c0-233c-4a0f-98d6-429c8e2424eb", "record_id": "flaws_cloudtrail:0000483:d522e5c0-233c-4a0f-98d6-429c8e2424eb", "row_index": 483, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d522e5c0-233c-4a0f-98d6-429c8e2424eb", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae0d81d3-6d3e-49c1-8fe1-31124d8c350", "record_id": "flaws_cloudtrail:0000484:ae0d81d3-6d3e-49c1-8fe1-31124d8c350", "row_index": 484, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae0d81d3-6d3e-49c1-8fe1-31124d8c350", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e5935cb-a7ad-4f9e-ac38-8a22d75de01a", "record_id": "flaws_cloudtrail:0000485:0e5935cb-a7ad-4f9e-ac38-8a22d75de01a", "row_index": 485, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e5935cb-a7ad-4f9e-ac38-8a22d75de01a", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55e9382a-5b66-4eef-8dec-a94ba551d0ee", "record_id": "flaws_cloudtrail:0000486:55e9382a-5b66-4eef-8dec-a94ba551d0ee", "row_index": 486, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55e9382a-5b66-4eef-8dec-a94ba551d0ee", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de67910-7cd5-4138-b1e1-38e517514f57", "record_id": "flaws_cloudtrail:0000487:de67910-7cd5-4138-b1e1-38e517514f57", "row_index": 487, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de67910-7cd5-4138-b1e1-38e517514f57", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f015395c7-d53f-4776-8926-bef6ada2e97f", "record_id": "flaws_cloudtrail:0000488:f015395c7-d53f-4776-8926-bef6ada2e97f", "row_index": 488, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f015395c7-d53f-4776-8926-bef6ada2e97f", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12ae2a14-a5f8-4508-9096-405721c08da", "record_id": "flaws_cloudtrail:0000489:12ae2a14-a5f8-4508-9096-405721c08da", "row_index": 489, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12ae2a14-a5f8-4508-9096-405721c08da", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8342d85-2b43-454a-bf23-7a3291d8fe38", "record_id": "flaws_cloudtrail:0000490:c8342d85-2b43-454a-bf23-7a3291d8fe38", "row_index": 490, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8342d85-2b43-454a-bf23-7a3291d8fe38", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24483d4-13f7-4ad3-863c-976859013e74", "record_id": "flaws_cloudtrail:0000491:24483d4-13f7-4ad3-863c-976859013e74", "row_index": 491, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24483d4-13f7-4ad3-863c-976859013e74", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb550c9a-1a13-4c71-835c-7b28b1dc3d3c", "record_id": "flaws_cloudtrail:0000492:fb550c9a-1a13-4c71-835c-7b28b1dc3d3c", "row_index": 492, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb550c9a-1a13-4c71-835c-7b28b1dc3d3c", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49d0d48a-aec7-441b-b031-f1a574593e", "record_id": "flaws_cloudtrail:0000493:49d0d48a-aec7-441b-b031-f1a574593e", "row_index": 493, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49d0d48a-aec7-441b-b031-f1a574593e", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3655c94-1f4e-4d0a-a238-082b94233f7", "record_id": "flaws_cloudtrail:0000494:e3655c94-1f4e-4d0a-a238-082b94233f7", "row_index": 494, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3655c94-1f4e-4d0a-a238-082b94233f7", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d522e5c0-233c-4a0f-98d6-429c8e2424eb", "record_id": "flaws_cloudtrail:0000495:d522e5c0-233c-4a0f-98d6-429c8e2424eb", "row_index": 495, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d522e5c0-233c-4a0f-98d6-429c8e2424eb", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae0d81d3-6d3e-49c1-8fe1-31124d8c350", "record_id": "flaws_cloudtrail:0000496:ae0d81d3-6d3e-49c1-8fe1-31124d8c350", "row_index": 496, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae0d81d3-6d3e-49c1-8fe1-31124d8c350", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e5935cb-a7ad-4f9e-ac38-8a22d75de01a", "record_id": "flaws_cloudtrail:0000497:0e5935cb-a7ad-4f9e-ac38-8a22d75de01a", "row_index": 497, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e5935cb-a7ad-4f9e-ac38-8a22d75de01a", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55e9382a-5b66-4eef-8dec-a94ba551d0ee", "record_id": "flaws_cloudtrail:0000498:55e9382a-5b66-4eef-8dec-a94ba551d0ee", "row_index": 498, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55e9382a-5b66-4eef-8dec-a94ba551d0ee", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de67910-7cd5-4138-b1e1-38e517514f57", "record_id": "flaws_cloudtrail:0000499:de67910-7cd5-4138-b1e1-38e517514f57", "row_index": 499, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de67910-7cd5-4138-b1e1-38e517514f57", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f015395c7-d53f-4776-8926-bef6ada2e97f", "record_id": "flaws_cloudtrail:0000500:f015395c7-d53f-4776-8926-bef6ada2e97f", "row_index": 500, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f015395c7-d53f-4776-8926-bef6ada2e97f", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12ae2a14-a5f8-4508-9096-405721c08da", "record_id": "flaws_cloudtrail:0000501:12ae2a14-a5f8-4508-9096-405721c08da", "row_index": 501, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12ae2a14-a5f8-4508-9096-405721c08da", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8342d85-2b43-454a-bf23-7a3291d8fe38", "record_id": "flaws_cloudtrail:0000502:c8342d85-2b43-454a-bf23-7a3291d8fe38", "row_index": 502, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8342d85-2b43-454a-bf23-7a3291d8fe38", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24483d4-13f7-4ad3-863c-976859013e74", "record_id": "flaws_cloudtrail:0000503:24483d4-13f7-4ad3-863c-976859013e74", "row_index": 503, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24483d4-13f7-4ad3-863c-976859013e74", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb550c9a-1a13-4c71-835c-7b28b1dc3d3c", "record_id": "flaws_cloudtrail:0000504:fb550c9a-1a13-4c71-835c-7b28b1dc3d3c", "row_index": 504, "timestamp": "2019-05-04T23:11:40Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb550c9a-1a13-4c71-835c-7b28b1dc3d3c", "eventTime": "2019-05-04T23:11:40Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f75417f-fa02-4cf9-9837-8998de650d9c", "record_id": "flaws_cloudtrail:0000505:f75417f-fa02-4cf9-9837-8998de650d9c", "row_index": 505, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f75417f-fa02-4cf9-9837-8998de650d9c", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b3fc71d-d1e8-4157-be3e-3cab61da6071", "record_id": "flaws_cloudtrail:0000506:3b3fc71d-d1e8-4157-be3e-3cab61da6071", "row_index": 506, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b3fc71d-d1e8-4157-be3e-3cab61da6071", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4d97533-839b-4b6f-8dbe-08b05c0ebbff", "record_id": "flaws_cloudtrail:0000507:d4d97533-839b-4b6f-8dbe-08b05c0ebbff", "row_index": 507, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4d97533-839b-4b6f-8dbe-08b05c0ebbff", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffd519e8-22ed-46c2-958d-87a476ca81e9", "record_id": "flaws_cloudtrail:0000508:ffd519e8-22ed-46c2-958d-87a476ca81e9", "row_index": 508, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffd519e8-22ed-46c2-958d-87a476ca81e9", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "926887ac0-bb9b-4aca-9b71-ddd61e4ae8e6", "record_id": "flaws_cloudtrail:0000509:926887ac0-bb9b-4aca-9b71-ddd61e4ae8e6", "row_index": 509, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "926887ac0-bb9b-4aca-9b71-ddd61e4ae8e6", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f200c08b-59c4-4d47-a273-46c0fec28abe", "record_id": "flaws_cloudtrail:0000510:f200c08b-59c4-4d47-a273-46c0fec28abe", "row_index": 510, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f200c08b-59c4-4d47-a273-46c0fec28abe", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b6e403e-f3f3-4361-a76d-16edd9272553", "record_id": "flaws_cloudtrail:0000511:5b6e403e-f3f3-4361-a76d-16edd9272553", "row_index": 511, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b6e403e-f3f3-4361-a76d-16edd9272553", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a633251-207c-42bb-9bcc-d7a768eaac7d", "record_id": "flaws_cloudtrail:0000512:2a633251-207c-42bb-9bcc-d7a768eaac7d", "row_index": 512, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a633251-207c-42bb-9bcc-d7a768eaac7d", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f965619c8-ec59-40aa-9bb1-aa58cf098a3e", "record_id": "flaws_cloudtrail:0000513:f965619c8-ec59-40aa-9bb1-aa58cf098a3e", "row_index": 513, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f965619c8-ec59-40aa-9bb1-aa58cf098a3e", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50fa9ea3-03bb-4ca3-8107-09026f2707f", "record_id": "flaws_cloudtrail:0000514:50fa9ea3-03bb-4ca3-8107-09026f2707f", "row_index": 514, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50fa9ea3-03bb-4ca3-8107-09026f2707f", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f4347fe-8f4c-4a8f-ba7a-952517c3c10d", "record_id": "flaws_cloudtrail:0000515:5f4347fe-8f4c-4a8f-ba7a-952517c3c10d", "row_index": 515, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f4347fe-8f4c-4a8f-ba7a-952517c3c10d", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b398469-ca40-4e4f-93dc-f64098e7a9a0", "record_id": "flaws_cloudtrail:0000516:b398469-ca40-4e4f-93dc-f64098e7a9a0", "row_index": 516, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b398469-ca40-4e4f-93dc-f64098e7a9a0", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc768ef2-d606-4d0c-8700-ff81981e232", "record_id": "flaws_cloudtrail:0000517:fc768ef2-d606-4d0c-8700-ff81981e232", "row_index": 517, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc768ef2-d606-4d0c-8700-ff81981e232", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a52ab372-2a64-4acb-9660-879adae9ffec", "record_id": "flaws_cloudtrail:0000518:a52ab372-2a64-4acb-9660-879adae9ffec", "row_index": 518, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a52ab372-2a64-4acb-9660-879adae9ffec", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d995355f-4c0f-468f-bfda-09ecbd9c3330", "record_id": "flaws_cloudtrail:0000519:4d995355f-4c0f-468f-bfda-09ecbd9c3330", "row_index": 519, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d995355f-4c0f-468f-bfda-09ecbd9c3330", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f75417f-fa02-4cf9-9837-8998de650d9c", "record_id": "flaws_cloudtrail:0000520:f75417f-fa02-4cf9-9837-8998de650d9c", "row_index": 520, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f75417f-fa02-4cf9-9837-8998de650d9c", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b3fc71d-d1e8-4157-be3e-3cab61da6071", "record_id": "flaws_cloudtrail:0000521:3b3fc71d-d1e8-4157-be3e-3cab61da6071", "row_index": 521, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b3fc71d-d1e8-4157-be3e-3cab61da6071", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4d97533-839b-4b6f-8dbe-08b05c0ebbff", "record_id": "flaws_cloudtrail:0000522:d4d97533-839b-4b6f-8dbe-08b05c0ebbff", "row_index": 522, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4d97533-839b-4b6f-8dbe-08b05c0ebbff", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffd519e8-22ed-46c2-958d-87a476ca81e9", "record_id": "flaws_cloudtrail:0000523:ffd519e8-22ed-46c2-958d-87a476ca81e9", "row_index": 523, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffd519e8-22ed-46c2-958d-87a476ca81e9", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "926887ac0-bb9b-4aca-9b71-ddd61e4ae8e6", "record_id": "flaws_cloudtrail:0000524:926887ac0-bb9b-4aca-9b71-ddd61e4ae8e6", "row_index": 524, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "926887ac0-bb9b-4aca-9b71-ddd61e4ae8e6", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f200c08b-59c4-4d47-a273-46c0fec28abe", "record_id": "flaws_cloudtrail:0000525:f200c08b-59c4-4d47-a273-46c0fec28abe", "row_index": 525, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f200c08b-59c4-4d47-a273-46c0fec28abe", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b6e403e-f3f3-4361-a76d-16edd9272553", "record_id": "flaws_cloudtrail:0000526:5b6e403e-f3f3-4361-a76d-16edd9272553", "row_index": 526, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b6e403e-f3f3-4361-a76d-16edd9272553", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a633251-207c-42bb-9bcc-d7a768eaac7d", "record_id": "flaws_cloudtrail:0000527:2a633251-207c-42bb-9bcc-d7a768eaac7d", "row_index": 527, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a633251-207c-42bb-9bcc-d7a768eaac7d", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f965619c8-ec59-40aa-9bb1-aa58cf098a3e", "record_id": "flaws_cloudtrail:0000528:f965619c8-ec59-40aa-9bb1-aa58cf098a3e", "row_index": 528, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f965619c8-ec59-40aa-9bb1-aa58cf098a3e", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50fa9ea3-03bb-4ca3-8107-09026f2707f", "record_id": "flaws_cloudtrail:0000529:50fa9ea3-03bb-4ca3-8107-09026f2707f", "row_index": 529, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50fa9ea3-03bb-4ca3-8107-09026f2707f", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f4347fe-8f4c-4a8f-ba7a-952517c3c10d", "record_id": "flaws_cloudtrail:0000530:5f4347fe-8f4c-4a8f-ba7a-952517c3c10d", "row_index": 530, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f4347fe-8f4c-4a8f-ba7a-952517c3c10d", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b398469-ca40-4e4f-93dc-f64098e7a9a0", "record_id": "flaws_cloudtrail:0000531:b398469-ca40-4e4f-93dc-f64098e7a9a0", "row_index": 531, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b398469-ca40-4e4f-93dc-f64098e7a9a0", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc768ef2-d606-4d0c-8700-ff81981e232", "record_id": "flaws_cloudtrail:0000532:fc768ef2-d606-4d0c-8700-ff81981e232", "row_index": 532, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc768ef2-d606-4d0c-8700-ff81981e232", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a52ab372-2a64-4acb-9660-879adae9ffec", "record_id": "flaws_cloudtrail:0000533:a52ab372-2a64-4acb-9660-879adae9ffec", "row_index": 533, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a52ab372-2a64-4acb-9660-879adae9ffec", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d995355f-4c0f-468f-bfda-09ecbd9c3330", "record_id": "flaws_cloudtrail:0000534:4d995355f-4c0f-468f-bfda-09ecbd9c3330", "row_index": 534, "timestamp": "2019-05-04T23:11:42Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d995355f-4c0f-468f-bfda-09ecbd9c3330", "eventTime": "2019-05-04T23:11:42Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65fa7969-4ed2-4c91-ab14-43c1eaf70c11", "record_id": "flaws_cloudtrail:0000535:65fa7969-4ed2-4c91-ab14-43c1eaf70c11", "row_index": 535, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65fa7969-4ed2-4c91-ab14-43c1eaf70c11", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c4862de-2098-4a66-a159-d4d4fb62ae8e", "record_id": "flaws_cloudtrail:0000536:7c4862de-2098-4a66-a159-d4d4fb62ae8e", "row_index": 536, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c4862de-2098-4a66-a159-d4d4fb62ae8e", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cb0443a-6b87-4782-b890-e54058eab4", "record_id": "flaws_cloudtrail:0000537:4cb0443a-6b87-4782-b890-e54058eab4", "row_index": 537, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cb0443a-6b87-4782-b890-e54058eab4", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba914b04-6f63-4598-8ce8-f91518c37621", "record_id": "flaws_cloudtrail:0000538:ba914b04-6f63-4598-8ce8-f91518c37621", "row_index": 538, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba914b04-6f63-4598-8ce8-f91518c37621", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e4d859f-7c55-49e5-9daa-95a0a3e6e79f", "record_id": "flaws_cloudtrail:0000539:8e4d859f-7c55-49e5-9daa-95a0a3e6e79f", "row_index": 539, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e4d859f-7c55-49e5-9daa-95a0a3e6e79f", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70dd2058-e422-4bde-a30f-db358862b342", "record_id": "flaws_cloudtrail:0000540:70dd2058-e422-4bde-a30f-db358862b342", "row_index": 540, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70dd2058-e422-4bde-a30f-db358862b342", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb5b5bd9-19ea-4b69-82fa-7fbe6ce1acd4", "record_id": "flaws_cloudtrail:0000541:eb5b5bd9-19ea-4b69-82fa-7fbe6ce1acd4", "row_index": 541, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb5b5bd9-19ea-4b69-82fa-7fbe6ce1acd4", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d493359-78cf-4212-801c-6f429dedd435", "record_id": "flaws_cloudtrail:0000542:7d493359-78cf-4212-801c-6f429dedd435", "row_index": 542, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d493359-78cf-4212-801c-6f429dedd435", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c746141e-ad13-420c-b0ec-3306509ae842", "record_id": "flaws_cloudtrail:0000543:c746141e-ad13-420c-b0ec-3306509ae842", "row_index": 543, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c746141e-ad13-420c-b0ec-3306509ae842", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e00ad43-18ad-489b-b36f-36d4698c46ad", "record_id": "flaws_cloudtrail:0000544:2e00ad43-18ad-489b-b36f-36d4698c46ad", "row_index": 544, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e00ad43-18ad-489b-b36f-36d4698c46ad", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf8f3ec8-3b28-40ea-8b81-eb7c45a09cfe", "record_id": "flaws_cloudtrail:0000545:cf8f3ec8-3b28-40ea-8b81-eb7c45a09cfe", "row_index": 545, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf8f3ec8-3b28-40ea-8b81-eb7c45a09cfe", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46c9b56e-6f0c-4e2b-b5e8-9511d79977", "record_id": "flaws_cloudtrail:0000546:46c9b56e-6f0c-4e2b-b5e8-9511d79977", "row_index": 546, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46c9b56e-6f0c-4e2b-b5e8-9511d79977", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a006e165-7e5c-4313-b62a-4b9640f621f1", "record_id": "flaws_cloudtrail:0000547:a006e165-7e5c-4313-b62a-4b9640f621f1", "row_index": 547, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a006e165-7e5c-4313-b62a-4b9640f621f1", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "241b624b-9b8b-4605-bbdc-9bc2e5f222d6", "record_id": "flaws_cloudtrail:0000548:241b624b-9b8b-4605-bbdc-9bc2e5f222d6", "row_index": 548, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "241b624b-9b8b-4605-bbdc-9bc2e5f222d6", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd5baf3e-4afe-49be-bd46-45173bdaf23d", "record_id": "flaws_cloudtrail:0000549:fd5baf3e-4afe-49be-bd46-45173bdaf23d", "row_index": 549, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd5baf3e-4afe-49be-bd46-45173bdaf23d", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5a104fe-5245-4051-9ecf-ee05315b0e94", "record_id": "flaws_cloudtrail:0000550:c5a104fe-5245-4051-9ecf-ee05315b0e94", "row_index": 550, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5a104fe-5245-4051-9ecf-ee05315b0e94", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65fa7969-4ed2-4c91-ab14-43c1eaf70c11", "record_id": "flaws_cloudtrail:0000551:65fa7969-4ed2-4c91-ab14-43c1eaf70c11", "row_index": 551, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65fa7969-4ed2-4c91-ab14-43c1eaf70c11", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c4862de-2098-4a66-a159-d4d4fb62ae8e", "record_id": "flaws_cloudtrail:0000552:7c4862de-2098-4a66-a159-d4d4fb62ae8e", "row_index": 552, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c4862de-2098-4a66-a159-d4d4fb62ae8e", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cb0443a-6b87-4782-b890-e54058eab4", "record_id": "flaws_cloudtrail:0000553:4cb0443a-6b87-4782-b890-e54058eab4", "row_index": 553, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cb0443a-6b87-4782-b890-e54058eab4", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba914b04-6f63-4598-8ce8-f91518c37621", "record_id": "flaws_cloudtrail:0000554:ba914b04-6f63-4598-8ce8-f91518c37621", "row_index": 554, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba914b04-6f63-4598-8ce8-f91518c37621", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e4d859f-7c55-49e5-9daa-95a0a3e6e79f", "record_id": "flaws_cloudtrail:0000555:8e4d859f-7c55-49e5-9daa-95a0a3e6e79f", "row_index": 555, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e4d859f-7c55-49e5-9daa-95a0a3e6e79f", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70dd2058-e422-4bde-a30f-db358862b342", "record_id": "flaws_cloudtrail:0000556:70dd2058-e422-4bde-a30f-db358862b342", "row_index": 556, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70dd2058-e422-4bde-a30f-db358862b342", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb5b5bd9-19ea-4b69-82fa-7fbe6ce1acd4", "record_id": "flaws_cloudtrail:0000557:eb5b5bd9-19ea-4b69-82fa-7fbe6ce1acd4", "row_index": 557, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb5b5bd9-19ea-4b69-82fa-7fbe6ce1acd4", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d493359-78cf-4212-801c-6f429dedd435", "record_id": "flaws_cloudtrail:0000558:7d493359-78cf-4212-801c-6f429dedd435", "row_index": 558, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d493359-78cf-4212-801c-6f429dedd435", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c746141e-ad13-420c-b0ec-3306509ae842", "record_id": "flaws_cloudtrail:0000559:c746141e-ad13-420c-b0ec-3306509ae842", "row_index": 559, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c746141e-ad13-420c-b0ec-3306509ae842", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e00ad43-18ad-489b-b36f-36d4698c46ad", "record_id": "flaws_cloudtrail:0000560:2e00ad43-18ad-489b-b36f-36d4698c46ad", "row_index": 560, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e00ad43-18ad-489b-b36f-36d4698c46ad", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf8f3ec8-3b28-40ea-8b81-eb7c45a09cfe", "record_id": "flaws_cloudtrail:0000561:cf8f3ec8-3b28-40ea-8b81-eb7c45a09cfe", "row_index": 561, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf8f3ec8-3b28-40ea-8b81-eb7c45a09cfe", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46c9b56e-6f0c-4e2b-b5e8-9511d79977", "record_id": "flaws_cloudtrail:0000562:46c9b56e-6f0c-4e2b-b5e8-9511d79977", "row_index": 562, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46c9b56e-6f0c-4e2b-b5e8-9511d79977", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a006e165-7e5c-4313-b62a-4b9640f621f1", "record_id": "flaws_cloudtrail:0000563:a006e165-7e5c-4313-b62a-4b9640f621f1", "row_index": 563, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a006e165-7e5c-4313-b62a-4b9640f621f1", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "241b624b-9b8b-4605-bbdc-9bc2e5f222d6", "record_id": "flaws_cloudtrail:0000564:241b624b-9b8b-4605-bbdc-9bc2e5f222d6", "row_index": 564, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "241b624b-9b8b-4605-bbdc-9bc2e5f222d6", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd5baf3e-4afe-49be-bd46-45173bdaf23d", "record_id": "flaws_cloudtrail:0000565:fd5baf3e-4afe-49be-bd46-45173bdaf23d", "row_index": 565, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd5baf3e-4afe-49be-bd46-45173bdaf23d", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5a104fe-5245-4051-9ecf-ee05315b0e94", "record_id": "flaws_cloudtrail:0000566:c5a104fe-5245-4051-9ecf-ee05315b0e94", "row_index": 566, "timestamp": "2019-05-04T23:11:43Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5a104fe-5245-4051-9ecf-ee05315b0e94", "eventTime": "2019-05-04T23:11:43Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3297b8e8-6312-4211-ae11-44ab6b1e53f6", "record_id": "flaws_cloudtrail:0000567:3297b8e8-6312-4211-ae11-44ab6b1e53f6", "row_index": 567, "timestamp": "2019-05-04T23:11:44Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3297b8e8-6312-4211-ae11-44ab6b1e53f6", "eventTime": "2019-05-04T23:11:44Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3297b8e8-6312-4211-ae11-44ab6b1e53f6", "record_id": "flaws_cloudtrail:0000568:3297b8e8-6312-4211-ae11-44ab6b1e53f6", "row_index": 568, "timestamp": "2019-05-04T23:11:44Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3297b8e8-6312-4211-ae11-44ab6b1e53f6", "eventTime": "2019-05-04T23:11:44Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "720c1929-230c-439b-a19a-765f305b9f0a", "record_id": "flaws_cloudtrail:0000569:720c1929-230c-439b-a19a-765f305b9f0a", "row_index": 569, "timestamp": "2019-05-04T23:11:45Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "720c1929-230c-439b-a19a-765f305b9f0a", "eventTime": "2019-05-04T23:11:45Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf8b2db0-3028-43f2-ad3d-066da8143b3f", "record_id": "flaws_cloudtrail:0000570:cf8b2db0-3028-43f2-ad3d-066da8143b3f", "row_index": 570, "timestamp": "2019-05-04T23:11:45Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf8b2db0-3028-43f2-ad3d-066da8143b3f", "eventTime": "2019-05-04T23:11:45Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fbe08fe-2e5a-4ec4-ae26-4ca0a92392f", "record_id": "flaws_cloudtrail:0000571:1fbe08fe-2e5a-4ec4-ae26-4ca0a92392f", "row_index": 571, "timestamp": "2019-05-04T23:11:45Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fbe08fe-2e5a-4ec4-ae26-4ca0a92392f", "eventTime": "2019-05-04T23:11:45Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1bf99fa-7138-4daf-a373-f722f6038ad9", "record_id": "flaws_cloudtrail:0000572:e1bf99fa-7138-4daf-a373-f722f6038ad9", "row_index": 572, "timestamp": "2019-05-04T23:11:45Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1bf99fa-7138-4daf-a373-f722f6038ad9", "eventTime": "2019-05-04T23:11:45Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13841c99-61db-4b91-9ed3-7dd18e4af147", "record_id": "flaws_cloudtrail:0000573:13841c99-61db-4b91-9ed3-7dd18e4af147", "row_index": 573, "timestamp": "2019-05-04T23:11:45Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13841c99-61db-4b91-9ed3-7dd18e4af147", "eventTime": "2019-05-04T23:11:45Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fda59ede-a10a-4f9f-ad8b-b015c33f91f3", "record_id": "flaws_cloudtrail:0000574:fda59ede-a10a-4f9f-ad8b-b015c33f91f3", "row_index": 574, "timestamp": "2019-05-04T23:11:45Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fda59ede-a10a-4f9f-ad8b-b015c33f91f3", "eventTime": "2019-05-04T23:11:45Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fb64f0f-d4a5-4ffc-ab48-e53d322439c", "record_id": "flaws_cloudtrail:0000575:9fb64f0f-d4a5-4ffc-ab48-e53d322439c", "row_index": 575, "timestamp": "2019-05-04T23:11:45Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fb64f0f-d4a5-4ffc-ab48-e53d322439c", "eventTime": "2019-05-04T23:11:45Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "720c1929-230c-439b-a19a-765f305b9f0a", "record_id": "flaws_cloudtrail:0000576:720c1929-230c-439b-a19a-765f305b9f0a", "row_index": 576, "timestamp": "2019-05-04T23:11:45Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "720c1929-230c-439b-a19a-765f305b9f0a", "eventTime": "2019-05-04T23:11:45Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf8b2db0-3028-43f2-ad3d-066da8143b3f", "record_id": "flaws_cloudtrail:0000577:cf8b2db0-3028-43f2-ad3d-066da8143b3f", "row_index": 577, "timestamp": "2019-05-04T23:11:45Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf8b2db0-3028-43f2-ad3d-066da8143b3f", "eventTime": "2019-05-04T23:11:45Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fbe08fe-2e5a-4ec4-ae26-4ca0a92392f", "record_id": "flaws_cloudtrail:0000578:1fbe08fe-2e5a-4ec4-ae26-4ca0a92392f", "row_index": 578, "timestamp": "2019-05-04T23:11:45Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fbe08fe-2e5a-4ec4-ae26-4ca0a92392f", "eventTime": "2019-05-04T23:11:45Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1bf99fa-7138-4daf-a373-f722f6038ad9", "record_id": "flaws_cloudtrail:0000579:e1bf99fa-7138-4daf-a373-f722f6038ad9", "row_index": 579, "timestamp": "2019-05-04T23:11:45Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1bf99fa-7138-4daf-a373-f722f6038ad9", "eventTime": "2019-05-04T23:11:45Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13841c99-61db-4b91-9ed3-7dd18e4af147", "record_id": "flaws_cloudtrail:0000580:13841c99-61db-4b91-9ed3-7dd18e4af147", "row_index": 580, "timestamp": "2019-05-04T23:11:45Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13841c99-61db-4b91-9ed3-7dd18e4af147", "eventTime": "2019-05-04T23:11:45Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fda59ede-a10a-4f9f-ad8b-b015c33f91f3", "record_id": "flaws_cloudtrail:0000581:fda59ede-a10a-4f9f-ad8b-b015c33f91f3", "row_index": 581, "timestamp": "2019-05-04T23:11:45Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fda59ede-a10a-4f9f-ad8b-b015c33f91f3", "eventTime": "2019-05-04T23:11:45Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fb64f0f-d4a5-4ffc-ab48-e53d322439c", "record_id": "flaws_cloudtrail:0000582:9fb64f0f-d4a5-4ffc-ab48-e53d322439c", "row_index": 582, "timestamp": "2019-05-04T23:11:45Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fb64f0f-d4a5-4ffc-ab48-e53d322439c", "eventTime": "2019-05-04T23:11:45Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f005f0e-0bec-4cf4-a8e5-039115fe83b", "record_id": "flaws_cloudtrail:0000583:4f005f0e-0bec-4cf4-a8e5-039115fe83b", "row_index": 583, "timestamp": "2019-05-04T23:11:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f005f0e-0bec-4cf4-a8e5-039115fe83b", "eventTime": "2019-05-04T23:11:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b8c8f88-5ea0-44dc-932b-e870573d8e51", "record_id": "flaws_cloudtrail:0000584:7b8c8f88-5ea0-44dc-932b-e870573d8e51", "row_index": 584, "timestamp": "2019-05-04T23:11:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b8c8f88-5ea0-44dc-932b-e870573d8e51", "eventTime": "2019-05-04T23:11:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4422bab7-c47e-4313-94dd-76df8b094123", "record_id": "flaws_cloudtrail:0000585:4422bab7-c47e-4313-94dd-76df8b094123", "row_index": 585, "timestamp": "2019-05-04T23:11:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4422bab7-c47e-4313-94dd-76df8b094123", "eventTime": "2019-05-04T23:11:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2bf6c36-f024-4479-af45-dfa48ae93afc", "record_id": "flaws_cloudtrail:0000586:f2bf6c36-f024-4479-af45-dfa48ae93afc", "row_index": 586, "timestamp": "2019-05-04T23:11:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2bf6c36-f024-4479-af45-dfa48ae93afc", "eventTime": "2019-05-04T23:11:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd0d686a-55eb-446b-9979-58755b0c90f", "record_id": "flaws_cloudtrail:0000587:bd0d686a-55eb-446b-9979-58755b0c90f", "row_index": 587, "timestamp": "2019-05-04T23:11:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd0d686a-55eb-446b-9979-58755b0c90f", "eventTime": "2019-05-04T23:11:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a42adc9-f654-4328-ac34-9db50ed4746b", "record_id": "flaws_cloudtrail:0000588:6a42adc9-f654-4328-ac34-9db50ed4746b", "row_index": 588, "timestamp": "2019-05-04T23:11:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a42adc9-f654-4328-ac34-9db50ed4746b", "eventTime": "2019-05-04T23:11:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7d1033d-9155-4cdc-821d-2dee1db6a06f", "record_id": "flaws_cloudtrail:0000589:d7d1033d-9155-4cdc-821d-2dee1db6a06f", "row_index": 589, "timestamp": "2019-05-04T23:11:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7d1033d-9155-4cdc-821d-2dee1db6a06f", "eventTime": "2019-05-04T23:11:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d74a0196-37a9-479a-87ca-f2cf028799b6", "record_id": "flaws_cloudtrail:0000590:d74a0196-37a9-479a-87ca-f2cf028799b6", "row_index": 590, "timestamp": "2019-05-04T23:11:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d74a0196-37a9-479a-87ca-f2cf028799b6", "eventTime": "2019-05-04T23:11:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9e52ce3-6407-448d-8092-2d704e24683e", "record_id": "flaws_cloudtrail:0000591:c9e52ce3-6407-448d-8092-2d704e24683e", "row_index": 591, "timestamp": "2019-05-04T23:11:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9e52ce3-6407-448d-8092-2d704e24683e", "eventTime": "2019-05-04T23:11:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f005f0e-0bec-4cf4-a8e5-039115fe83b", "record_id": "flaws_cloudtrail:0000592:4f005f0e-0bec-4cf4-a8e5-039115fe83b", "row_index": 592, "timestamp": "2019-05-04T23:11:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f005f0e-0bec-4cf4-a8e5-039115fe83b", "eventTime": "2019-05-04T23:11:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b8c8f88-5ea0-44dc-932b-e870573d8e51", "record_id": "flaws_cloudtrail:0000593:7b8c8f88-5ea0-44dc-932b-e870573d8e51", "row_index": 593, "timestamp": "2019-05-04T23:11:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b8c8f88-5ea0-44dc-932b-e870573d8e51", "eventTime": "2019-05-04T23:11:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4422bab7-c47e-4313-94dd-76df8b094123", "record_id": "flaws_cloudtrail:0000594:4422bab7-c47e-4313-94dd-76df8b094123", "row_index": 594, "timestamp": "2019-05-04T23:11:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4422bab7-c47e-4313-94dd-76df8b094123", "eventTime": "2019-05-04T23:11:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2bf6c36-f024-4479-af45-dfa48ae93afc", "record_id": "flaws_cloudtrail:0000595:f2bf6c36-f024-4479-af45-dfa48ae93afc", "row_index": 595, "timestamp": "2019-05-04T23:11:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2bf6c36-f024-4479-af45-dfa48ae93afc", "eventTime": "2019-05-04T23:11:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd0d686a-55eb-446b-9979-58755b0c90f", "record_id": "flaws_cloudtrail:0000596:bd0d686a-55eb-446b-9979-58755b0c90f", "row_index": 596, "timestamp": "2019-05-04T23:11:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd0d686a-55eb-446b-9979-58755b0c90f", "eventTime": "2019-05-04T23:11:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a42adc9-f654-4328-ac34-9db50ed4746b", "record_id": "flaws_cloudtrail:0000597:6a42adc9-f654-4328-ac34-9db50ed4746b", "row_index": 597, "timestamp": "2019-05-04T23:11:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a42adc9-f654-4328-ac34-9db50ed4746b", "eventTime": "2019-05-04T23:11:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7d1033d-9155-4cdc-821d-2dee1db6a06f", "record_id": "flaws_cloudtrail:0000598:d7d1033d-9155-4cdc-821d-2dee1db6a06f", "row_index": 598, "timestamp": "2019-05-04T23:11:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7d1033d-9155-4cdc-821d-2dee1db6a06f", "eventTime": "2019-05-04T23:11:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d74a0196-37a9-479a-87ca-f2cf028799b6", "record_id": "flaws_cloudtrail:0000599:d74a0196-37a9-479a-87ca-f2cf028799b6", "row_index": 599, "timestamp": "2019-05-04T23:11:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d74a0196-37a9-479a-87ca-f2cf028799b6", "eventTime": "2019-05-04T23:11:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9e52ce3-6407-448d-8092-2d704e24683e", "record_id": "flaws_cloudtrail:0000600:c9e52ce3-6407-448d-8092-2d704e24683e", "row_index": 600, "timestamp": "2019-05-04T23:11:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9e52ce3-6407-448d-8092-2d704e24683e", "eventTime": "2019-05-04T23:11:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb792a15-228b-4fc0-9af9-6593ab14211", "record_id": "flaws_cloudtrail:0000601:cb792a15-228b-4fc0-9af9-6593ab14211", "row_index": 601, "timestamp": "2019-05-04T23:11:47Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb792a15-228b-4fc0-9af9-6593ab14211", "eventTime": "2019-05-04T23:11:47Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb792a15-228b-4fc0-9af9-6593ab14211", "record_id": "flaws_cloudtrail:0000602:cb792a15-228b-4fc0-9af9-6593ab14211", "row_index": 602, "timestamp": "2019-05-04T23:11:47Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb792a15-228b-4fc0-9af9-6593ab14211", "eventTime": "2019-05-04T23:11:47Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed4f0a2f-b1d0-44cb-b032-72f663242d", "record_id": "flaws_cloudtrail:0000603:ed4f0a2f-b1d0-44cb-b032-72f663242d", "row_index": 603, "timestamp": "2019-05-04T23:11:48Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed4f0a2f-b1d0-44cb-b032-72f663242d", "eventTime": "2019-05-04T23:11:48Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e01314a-84d3-4f70-9f57-68892dbb6bdd", "record_id": "flaws_cloudtrail:0000604:9e01314a-84d3-4f70-9f57-68892dbb6bdd", "row_index": 604, "timestamp": "2019-05-04T23:11:48Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e01314a-84d3-4f70-9f57-68892dbb6bdd", "eventTime": "2019-05-04T23:11:48Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d749edd-e46c-4dc4-9e46-1a839165c1bd5", "record_id": "flaws_cloudtrail:0000605:6d749edd-e46c-4dc4-9e46-1a839165c1bd5", "row_index": 605, "timestamp": "2019-05-04T23:11:48Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d749edd-e46c-4dc4-9e46-1a839165c1bd5", "eventTime": "2019-05-04T23:11:48Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21dbfb34-f3cb-4009-9d8f-75a54dd4640c", "record_id": "flaws_cloudtrail:0000606:21dbfb34-f3cb-4009-9d8f-75a54dd4640c", "row_index": 606, "timestamp": "2019-05-04T23:11:48Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21dbfb34-f3cb-4009-9d8f-75a54dd4640c", "eventTime": "2019-05-04T23:11:48Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6feca28a-8563-4357-a9e2-8b24bfc021a9", "record_id": "flaws_cloudtrail:0000607:6feca28a-8563-4357-a9e2-8b24bfc021a9", "row_index": 607, "timestamp": "2019-05-04T23:11:48Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6feca28a-8563-4357-a9e2-8b24bfc021a9", "eventTime": "2019-05-04T23:11:48Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d7051a2-dd00-479f-8042-1a94938eb8cf", "record_id": "flaws_cloudtrail:0000608:2d7051a2-dd00-479f-8042-1a94938eb8cf", "row_index": 608, "timestamp": "2019-05-04T23:11:48Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d7051a2-dd00-479f-8042-1a94938eb8cf", "eventTime": "2019-05-04T23:11:48Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27562d-90ca-44b0-9917-f8f715465f46b", "record_id": "flaws_cloudtrail:0000609:27562d-90ca-44b0-9917-f8f715465f46b", "row_index": 609, "timestamp": "2019-05-04T23:11:48Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "63.196.215.112", "user_agent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27562d-90ca-44b0-9917-f8f715465f46b", "eventTime": "2019-05-04T23:11:48Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "63.196.215.112", "userAgent": "Boto3/1.9.142 Python/3.7.3 Linux/5.0.8-arch1-1-ARCH Botocore/1.12.142", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}