Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM principal appears to confirm who they are, survey the account’s audit-trail configuration, and then take action to reduce CloudTrail visibility. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9696a19a-69c2-4cb1-9ec1-a148eca0b247", "record_id": "flaws_cloudtrail:0000000:9696a19a-69c2-4cb1-9ec1-a148eca0b247", "row_index": 0, "timestamp": "2018-10-19T00:41:02Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9696a19a-69c2-4cb1-9ec1-a148eca0b247", "eventTime": "2018-10-19T00:41:02Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aebda404-1e1a-4c48-9592-34cb233562", "record_id": "flaws_cloudtrail:0000001:aebda404-1e1a-4c48-9592-34cb233562", "row_index": 1, "timestamp": "2018-10-19T00:41:02Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aebda404-1e1a-4c48-9592-34cb233562", "eventTime": "2018-10-19T00:41:02Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b50b596c-be83-4ff8-a669-6da597a9adb2", "record_id": "flaws_cloudtrail:0000002:b50b596c-be83-4ff8-a669-6da597a9adb2", "row_index": 2, "timestamp": "2018-10-19T00:41:02Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b50b596c-be83-4ff8-a669-6da597a9adb2", "eventTime": "2018-10-19T00:41:02Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4003fb12-facc-4214-a3ef-faa2f225e236", "record_id": "flaws_cloudtrail:0000003:4003fb12-facc-4214-a3ef-faa2f225e236", "row_index": 3, "timestamp": "2018-10-19T00:41:02Z", "event_type": "GetRolePolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4003fb12-facc-4214-a3ef-faa2f225e236", "eventTime": "2018-10-19T00:41:02Z", "eventName": "GetRolePolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "read_level_6_bucket", "roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f8f290c-a82d-4c2d-9842-a682311aa2cbb", "record_id": "flaws_cloudtrail:0000004:0f8f290c-a82d-4c2d-9842-a682311aa2cbb", "row_index": 4, "timestamp": "2018-10-19T00:41:03Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f8f290c-a82d-4c2d-9842-a682311aa2cbb", "eventTime": "2018-10-19T00:41:03Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a561982a-cee3-464f-b2eb-9d6afcbffa9c", "record_id": "flaws_cloudtrail:0000005:a561982a-cee3-464f-b2eb-9d6afcbffa9c", "row_index": 5, "timestamp": "2018-10-19T00:41:03Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a561982a-cee3-464f-b2eb-9d6afcbffa9c", "eventTime": "2018-10-19T00:41:03Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SummitRouteAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd9b0b87-0e9b-4439-b3b5-7637c346422", "record_id": "flaws_cloudtrail:0000006:dd9b0b87-0e9b-4439-b3b5-7637c346422", "row_index": 6, "timestamp": "2018-10-19T00:41:03Z", "event_type": "GetRolePolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd9b0b87-0e9b-4439-b3b5-7637c346422", "eventTime": "2018-10-19T00:41:03Z", "eventName": "GetRolePolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "SummitRouteLogAccess", "roleName": "SummitRouteAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7e976042-a16d-434f-9fdf-ea0f5a1e8643", "record_id": "flaws_cloudtrail:0000007:e7e976042-a16d-434f-9fdf-ea0f5a1e8643", "row_index": 7, "timestamp": "2018-10-19T00:41:03Z", "event_type": "GetLoginProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7e976042-a16d-434f-9fdf-ea0f5a1e8643", "eventTime": "2018-10-19T00:41:03Z", "eventName": "GetLoginProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Login Profile for User Level6 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d0b0bf1-8b7b-4470-9ee2-a146053e", "record_id": "flaws_cloudtrail:0000008:6d0b0bf1-8b7b-4470-9ee2-a146053e", "row_index": 8, "timestamp": "2018-10-19T00:41:03Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d0b0bf1-8b7b-4470-9ee2-a146053e", "eventTime": "2018-10-19T00:41:03Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8abe8a22-3463-4463-860e-8d27807cd23b", "record_id": "flaws_cloudtrail:0000009:8abe8a22-3463-4463-860e-8d27807cd23b", "row_index": 9, "timestamp": "2018-10-19T00:41:03Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8abe8a22-3463-4463-860e-8d27807cd23b", "eventTime": "2018-10-19T00:41:03Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c536946-f2f6-4aa0-b349-bfb70553c530", "record_id": "flaws_cloudtrail:0000010:6c536946-f2f6-4aa0-b349-bfb70553c530", "row_index": 10, "timestamp": "2018-10-19T00:41:04Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c536946-f2f6-4aa0-b349-bfb70553c530", "eventTime": "2018-10-19T00:41:04Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc1b2a95-19bd-43f3-87a4-4f284583f4136", "record_id": "flaws_cloudtrail:0000011:bc1b2a95-19bd-43f3-87a4-4f284583f4136", "row_index": 11, "timestamp": "2018-10-19T00:41:05Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc1b2a95-19bd-43f3-87a4-4f284583f4136", "eventTime": "2018-10-19T00:41:05Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54718e79-6a74-4d51-97de-59bcdba03f04", "record_id": "flaws_cloudtrail:0000012:54718e79-6a74-4d51-97de-59bcdba03f04", "row_index": 12, "timestamp": "2018-10-19T00:41:05Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54718e79-6a74-4d51-97de-59bcdba03f04", "eventTime": "2018-10-19T00:41:05Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "149b56d9-d1b5-43f0-918f-1ba342725b12", "record_id": "flaws_cloudtrail:0000013:149b56d9-d1b5-43f0-918f-1ba342725b12", "row_index": 13, "timestamp": "2018-10-19T00:41:07Z", "event_type": "ListDomains", "event_source": "route53domains.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA6G55QZ0OWHOVTDKS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "AWS Internal", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "149b56d9-d1b5-43f0-918f-1ba342725b12", "eventTime": "2018-10-19T00:41:07Z", "eventName": "ListDomains", "eventSource": "route53domains.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "AWS Internal", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA6G55QZ0OWHOVTDKS", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-19T00:41:07Z"}}, "invokedBy": "AWS Internal"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8cfe93c-3a14-4653-9833-0c6a97aa2315", "record_id": "flaws_cloudtrail:0000014:e8cfe93c-3a14-4653-9833-0c6a97aa2315", "row_index": 14, "timestamp": "2018-10-19T00:41:08Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8cfe93c-3a14-4653-9833-0c6a97aa2315", "eventTime": "2018-10-19T00:41:08Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f0ad199-5155-4bdf-90f3-acb11b6eadc0", "record_id": "flaws_cloudtrail:0000015:5f0ad199-5155-4bdf-90f3-acb11b6eadc0", "row_index": 15, "timestamp": "2018-10-19T00:41:08Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f0ad199-5155-4bdf-90f3-acb11b6eadc0", "eventTime": "2018-10-19T00:41:08Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "042e9878-4bf2-46ae-80c5-0fa058dcf320", "record_id": "flaws_cloudtrail:0000016:042e9878-4bf2-46ae-80c5-0fa058dcf320", "row_index": 16, "timestamp": "2018-10-19T00:41:09Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "042e9878-4bf2-46ae-80c5-0fa058dcf320", "eventTime": "2018-10-19T00:41:09Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "551970-9e58-4b98-9a05-85f8c5bf0c6f", "record_id": "flaws_cloudtrail:0000017:551970-9e58-4b98-9a05-85f8c5bf0c6f", "row_index": 17, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "551970-9e58-4b98-9a05-85f8c5bf0c6f", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c21fa6a0-a1f4-429c-b0e7-88d8ac3729fb", "record_id": "flaws_cloudtrail:0000018:c21fa6a0-a1f4-429c-b0e7-88d8ac3729fb", "row_index": 18, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c21fa6a0-a1f4-429c-b0e7-88d8ac3729fb", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78ebb526-68fc-4018-85cb-84f69e7a0862", "record_id": "flaws_cloudtrail:0000019:78ebb526-68fc-4018-85cb-84f69e7a0862", "row_index": 19, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78ebb526-68fc-4018-85cb-84f69e7a0862", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ee3814f-ac08-4e94-9807-617306cbe3c8a", "record_id": "flaws_cloudtrail:0000020:4ee3814f-ac08-4e94-9807-617306cbe3c8a", "row_index": 20, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ee3814f-ac08-4e94-9807-617306cbe3c8a", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05874df1-de48-4290-b518-131df623789b", "record_id": "flaws_cloudtrail:0000021:05874df1-de48-4290-b518-131df623789b", "row_index": 21, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05874df1-de48-4290-b518-131df623789b", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eccf3384-3948-4eb9-bc9f-1f91c0762ca7", "record_id": "flaws_cloudtrail:0000022:eccf3384-3948-4eb9-bc9f-1f91c0762ca7", "row_index": 22, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eccf3384-3948-4eb9-bc9f-1f91c0762ca7", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f0bdb6a-41b3-40bd-9bae-89f33a054278", "record_id": "flaws_cloudtrail:0000023:3f0bdb6a-41b3-40bd-9bae-89f33a054278", "row_index": 23, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f0bdb6a-41b3-40bd-9bae-89f33a054278", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f67cffbe-4c20-4cde-badf-6285c8c97655", "record_id": "flaws_cloudtrail:0000024:f67cffbe-4c20-4cde-badf-6285c8c97655", "row_index": 24, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f67cffbe-4c20-4cde-badf-6285c8c97655", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c3fa237-fba8-4343-8fb9-a1c584f2a669", "record_id": "flaws_cloudtrail:0000025:9c3fa237-fba8-4343-8fb9-a1c584f2a669", "row_index": 25, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c3fa237-fba8-4343-8fb9-a1c584f2a669", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d695509-d7c1-4fa7-b818-1e787bb0fd36", "record_id": "flaws_cloudtrail:0000026:2d695509-d7c1-4fa7-b818-1e787bb0fd36", "row_index": 26, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d695509-d7c1-4fa7-b818-1e787bb0fd36", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd5be356-97a0-4cdc-bf21-d87aa71a649c", "record_id": "flaws_cloudtrail:0000027:cd5be356-97a0-4cdc-bf21-d87aa71a649c", "row_index": 27, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd5be356-97a0-4cdc-bf21-d87aa71a649c", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b4c6e05-999e-4ae6-a8c1-97f394d8f01f", "record_id": "flaws_cloudtrail:0000028:6b4c6e05-999e-4ae6-a8c1-97f394d8f01f", "row_index": 28, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b4c6e05-999e-4ae6-a8c1-97f394d8f01f", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7646b60c-489b-4f9f-87b2-cb438b4214d5", "record_id": "flaws_cloudtrail:0000029:7646b60c-489b-4f9f-87b2-cb438b4214d5", "row_index": 29, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7646b60c-489b-4f9f-87b2-cb438b4214d5", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db1ef5a0-2ab6-4fe2-93e7-3c2d0244ceb3", "record_id": "flaws_cloudtrail:0000030:db1ef5a0-2ab6-4fe2-93e7-3c2d0244ceb3", "row_index": 30, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db1ef5a0-2ab6-4fe2-93e7-3c2d0244ceb3", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b93d89a-7350-406e-b6dc-bde81deca2b4", "record_id": "flaws_cloudtrail:0000031:8b93d89a-7350-406e-b6dc-bde81deca2b4", "row_index": 31, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b93d89a-7350-406e-b6dc-bde81deca2b4", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ca144a5-f9b8-4b7c-a12d-a27402f993af", "record_id": "flaws_cloudtrail:0000032:7ca144a5-f9b8-4b7c-a12d-a27402f993af", "row_index": 32, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ca144a5-f9b8-4b7c-a12d-a27402f993af", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac88309d-e944-47c0-88db-ca2254390a00", "record_id": "flaws_cloudtrail:0000033:ac88309d-e944-47c0-88db-ca2254390a00", "row_index": 33, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac88309d-e944-47c0-88db-ca2254390a00", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0064cb3d-703d-4d51-8149-a4fc73c72950", "record_id": "flaws_cloudtrail:0000034:0064cb3d-703d-4d51-8149-a4fc73c72950", "row_index": 34, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0064cb3d-703d-4d51-8149-a4fc73c72950", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3370ba64-762f-4e8b-8b34-75161d3ea9", "record_id": "flaws_cloudtrail:0000035:3370ba64-762f-4e8b-8b34-75161d3ea9", "row_index": 35, "timestamp": "2018-10-19T00:41:13Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3370ba64-762f-4e8b-8b34-75161d3ea9", "eventTime": "2018-10-19T00:41:13Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ceb8848-bbcf-4194-b915-bdce2caaf69e", "record_id": "flaws_cloudtrail:0000036:6ceb8848-bbcf-4194-b915-bdce2caaf69e", "row_index": 36, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ceb8848-bbcf-4194-b915-bdce2caaf69e", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72ec1e98-10f4-4aa2-8a17-628b5b0523dc", "record_id": "flaws_cloudtrail:0000037:72ec1e98-10f4-4aa2-8a17-628b5b0523dc", "row_index": 37, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72ec1e98-10f4-4aa2-8a17-628b5b0523dc", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4406c1d0-6a2a-4fd3-8c86-3058d729b772", "record_id": "flaws_cloudtrail:0000038:4406c1d0-6a2a-4fd3-8c86-3058d729b772", "row_index": 38, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4406c1d0-6a2a-4fd3-8c86-3058d729b772", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36eecb95-b5e1-43d4-9bcd-effb01547ac5", "record_id": "flaws_cloudtrail:0000039:36eecb95-b5e1-43d4-9bcd-effb01547ac5", "row_index": 39, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36eecb95-b5e1-43d4-9bcd-effb01547ac5", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ef98cc1-6e83-43fa-8a85-4efbb523361", "record_id": "flaws_cloudtrail:0000040:9ef98cc1-6e83-43fa-8a85-4efbb523361", "row_index": 40, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ef98cc1-6e83-43fa-8a85-4efbb523361", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3360e6b9-fdbd-4da6-bbc3-40ae99cf88e1", "record_id": "flaws_cloudtrail:0000041:3360e6b9-fdbd-4da6-bbc3-40ae99cf88e1", "row_index": 41, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3360e6b9-fdbd-4da6-bbc3-40ae99cf88e1", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d7a604b-5dd9-4dc5-89f3-b77baf5ffcc7", "record_id": "flaws_cloudtrail:0000042:2d7a604b-5dd9-4dc5-89f3-b77baf5ffcc7", "row_index": 42, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d7a604b-5dd9-4dc5-89f3-b77baf5ffcc7", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b7334b4-212c-40dc-90e4-c1a2d55cb04f", "record_id": "flaws_cloudtrail:0000043:4b7334b4-212c-40dc-90e4-c1a2d55cb04f", "row_index": 43, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b7334b4-212c-40dc-90e4-c1a2d55cb04f", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "635cca3c-a02b-473b-837f-5f569349e844", "record_id": "flaws_cloudtrail:0000044:635cca3c-a02b-473b-837f-5f569349e844", "row_index": 44, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "635cca3c-a02b-473b-837f-5f569349e844", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82ca27e2-ea5f-49fe-8edb-ce9879d6d07b", "record_id": "flaws_cloudtrail:0000045:82ca27e2-ea5f-49fe-8edb-ce9879d6d07b", "row_index": 45, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82ca27e2-ea5f-49fe-8edb-ce9879d6d07b", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e3a7a7d-71bf-4a63-9ade-41fcc3328b83", "record_id": "flaws_cloudtrail:0000046:1e3a7a7d-71bf-4a63-9ade-41fcc3328b83", "row_index": 46, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e3a7a7d-71bf-4a63-9ade-41fcc3328b83", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05a57a06-106e-4ea3-82b3-8fb40d1a875e", "record_id": "flaws_cloudtrail:0000047:05a57a06-106e-4ea3-82b3-8fb40d1a875e", "row_index": 47, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05a57a06-106e-4ea3-82b3-8fb40d1a875e", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "743125-e604-4aa4-a102-a33eacc7845c", "record_id": "flaws_cloudtrail:0000048:743125-e604-4aa4-a102-a33eacc7845c", "row_index": 48, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "743125-e604-4aa4-a102-a33eacc7845c", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eaa14a07-4617-4712-804f-7f1784b837d8", "record_id": "flaws_cloudtrail:0000049:eaa14a07-4617-4712-804f-7f1784b837d8", "row_index": 49, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eaa14a07-4617-4712-804f-7f1784b837d8", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "276bfba4-1e4b-42b5-b774-6cd846a6be52", "record_id": "flaws_cloudtrail:0000050:276bfba4-1e4b-42b5-b774-6cd846a6be52", "row_index": 50, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "276bfba4-1e4b-42b5-b774-6cd846a6be52", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9114b81-1be4-4820-be81-510a21b167b4", "record_id": "flaws_cloudtrail:0000051:f9114b81-1be4-4820-be81-510a21b167b4", "row_index": 51, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9114b81-1be4-4820-be81-510a21b167b4", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "516346-590f-4019-8dfe-446210677da4", "record_id": "flaws_cloudtrail:0000052:516346-590f-4019-8dfe-446210677da4", "row_index": 52, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "516346-590f-4019-8dfe-446210677da4", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29c864d0-026f-40a1-aef2-d379240c2b373", "record_id": "flaws_cloudtrail:0000053:29c864d0-026f-40a1-aef2-d379240c2b373", "row_index": 53, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29c864d0-026f-40a1-aef2-d379240c2b373", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86848c7a-1a4b-4003-9cd9-11c1c42a4edf", "record_id": "flaws_cloudtrail:0000054:86848c7a-1a4b-4003-9cd9-11c1c42a4edf", "row_index": 54, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86848c7a-1a4b-4003-9cd9-11c1c42a4edf", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9eb00365-fbe2-451a-a430-9dc054704c870", "record_id": "flaws_cloudtrail:0000055:9eb00365-fbe2-451a-a430-9dc054704c870", "row_index": 55, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9eb00365-fbe2-451a-a430-9dc054704c870", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0efee4d-6a85-4548-9d39-023d6839f61c", "record_id": "flaws_cloudtrail:0000056:b0efee4d-6a85-4548-9d39-023d6839f61c", "row_index": 56, "timestamp": "2018-10-19T00:41:14Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0efee4d-6a85-4548-9d39-023d6839f61c", "eventTime": "2018-10-19T00:41:14Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8844a5c-69af-4a26-856b-eb48dd99d98e", "record_id": "flaws_cloudtrail:0000057:a8844a5c-69af-4a26-856b-eb48dd99d98e", "row_index": 57, "timestamp": "2018-10-19T00:41:15Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8844a5c-69af-4a26-856b-eb48dd99d98e", "eventTime": "2018-10-19T00:41:15Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e749c6ef-c66e-4b3b-ae50-f271908e579", "record_id": "flaws_cloudtrail:0000058:e749c6ef-c66e-4b3b-ae50-f271908e579", "row_index": 58, "timestamp": "2018-10-19T00:41:15Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e749c6ef-c66e-4b3b-ae50-f271908e579", "eventTime": "2018-10-19T00:41:15Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ea3ecc7-4764-4a47-aee5-9c710a1e96f5", "record_id": "flaws_cloudtrail:0000059:2ea3ecc7-4764-4a47-aee5-9c710a1e96f5", "row_index": 59, "timestamp": "2018-10-19T00:41:15Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ea3ecc7-4764-4a47-aee5-9c710a1e96f5", "eventTime": "2018-10-19T00:41:15Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "729b951e-13d9-4d78-85cb-430ae1a473a2", "record_id": "flaws_cloudtrail:0000060:729b951e-13d9-4d78-85cb-430ae1a473a2", "row_index": 60, "timestamp": "2018-10-19T00:41:15Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "729b951e-13d9-4d78-85cb-430ae1a473a2", "eventTime": "2018-10-19T00:41:15Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb4dd41a-54ef-4f9f-981c-6deecea2e5d7", "record_id": "flaws_cloudtrail:0000061:eb4dd41a-54ef-4f9f-981c-6deecea2e5d7", "row_index": 61, "timestamp": "2018-10-19T00:41:15Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb4dd41a-54ef-4f9f-981c-6deecea2e5d7", "eventTime": "2018-10-19T00:41:15Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0be9b92c-56e6-423c-bbc8-570891c8b9e", "record_id": "flaws_cloudtrail:0000062:0be9b92c-56e6-423c-bbc8-570891c8b9e", "row_index": 62, "timestamp": "2018-10-19T00:41:15Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0be9b92c-56e6-423c-bbc8-570891c8b9e", "eventTime": "2018-10-19T00:41:15Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9eedd734-e62e-492b-a779-fd19bea978678", "record_id": "flaws_cloudtrail:0000063:9eedd734-e62e-492b-a779-fd19bea978678", "row_index": 63, "timestamp": "2018-10-19T00:41:15Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9eedd734-e62e-492b-a779-fd19bea978678", "eventTime": "2018-10-19T00:41:15Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54da7cd7-6e9a-48bb-b5a6-4f391b5316ff", "record_id": "flaws_cloudtrail:0000064:54da7cd7-6e9a-48bb-b5a6-4f391b5316ff", "row_index": 64, "timestamp": "2018-10-19T00:41:15Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54da7cd7-6e9a-48bb-b5a6-4f391b5316ff", "eventTime": "2018-10-19T00:41:15Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d994239e0-cd31-4571-9eda-928f943e7c62", "record_id": "flaws_cloudtrail:0000065:d994239e0-cd31-4571-9eda-928f943e7c62", "row_index": 65, "timestamp": "2018-10-19T00:41:15Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d994239e0-cd31-4571-9eda-928f943e7c62", "eventTime": "2018-10-19T00:41:15Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff787eec-dc30-4024-b3c2-90650e01283f", "record_id": "flaws_cloudtrail:0000066:ff787eec-dc30-4024-b3c2-90650e01283f", "row_index": 66, "timestamp": "2018-10-19T00:41:15Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff787eec-dc30-4024-b3c2-90650e01283f", "eventTime": "2018-10-19T00:41:15Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab48d347-3ace-44b0-ade1-1cd7b797c02a", "record_id": "flaws_cloudtrail:0000067:ab48d347-3ace-44b0-ade1-1cd7b797c02a", "row_index": 67, "timestamp": "2018-10-19T00:41:16Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab48d347-3ace-44b0-ade1-1cd7b797c02a", "eventTime": "2018-10-19T00:41:16Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a8c4084-306b-4258-8662-1da011d54c67", "record_id": "flaws_cloudtrail:0000068:7a8c4084-306b-4258-8662-1da011d54c67", "row_index": 68, "timestamp": "2018-10-19T00:41:16Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a8c4084-306b-4258-8662-1da011d54c67", "eventTime": "2018-10-19T00:41:16Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8ef40ce-9e8c-4637-a34a-43d9f5c29f35", "record_id": "flaws_cloudtrail:0000069:b8ef40ce-9e8c-4637-a34a-43d9f5c29f35", "row_index": 69, "timestamp": "2018-10-19T00:41:16Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8ef40ce-9e8c-4637-a34a-43d9f5c29f35", "eventTime": "2018-10-19T00:41:16Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b9d1fec-a472-47ec-a4ce-5c8eece9f1af", "record_id": "flaws_cloudtrail:0000070:6b9d1fec-a472-47ec-a4ce-5c8eece9f1af", "row_index": 70, "timestamp": "2018-10-19T00:41:16Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b9d1fec-a472-47ec-a4ce-5c8eece9f1af", "eventTime": "2018-10-19T00:41:16Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a42b89db-0f4b-43ce-8523-bc7e10ece142", "record_id": "flaws_cloudtrail:0000071:a42b89db-0f4b-43ce-8523-bc7e10ece142", "row_index": 71, "timestamp": "2018-10-19T00:41:16Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a42b89db-0f4b-43ce-8523-bc7e10ece142", "eventTime": "2018-10-19T00:41:16Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb516fc7-462c-4268-9484-cdec292763bdb", "record_id": "flaws_cloudtrail:0000072:bb516fc7-462c-4268-9484-cdec292763bdb", "row_index": 72, "timestamp": "2018-10-19T00:41:16Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb516fc7-462c-4268-9484-cdec292763bdb", "eventTime": "2018-10-19T00:41:16Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c301bf1e-6373-4574-b294-9c0ea11d2d83", "record_id": "flaws_cloudtrail:0000073:c301bf1e-6373-4574-b294-9c0ea11d2d83", "row_index": 73, "timestamp": "2018-10-19T00:41:16Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c301bf1e-6373-4574-b294-9c0ea11d2d83", "eventTime": "2018-10-19T00:41:16Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fc0fc4e-78e0-42bb-a60d-1e4b2f585700", "record_id": "flaws_cloudtrail:0000074:3fc0fc4e-78e0-42bb-a60d-1e4b2f585700", "row_index": 74, "timestamp": "2018-10-19T00:41:16Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fc0fc4e-78e0-42bb-a60d-1e4b2f585700", "eventTime": "2018-10-19T00:41:16Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27bb8091-fd6a-495f-a565-c3e455de0d77", "record_id": "flaws_cloudtrail:0000075:27bb8091-fd6a-495f-a565-c3e455de0d77", "row_index": 75, "timestamp": "2018-10-19T00:41:16Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27bb8091-fd6a-495f-a565-c3e455de0d77", "eventTime": "2018-10-19T00:41:16Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c69751-feb7-47e7-a34f-9c802a36b7f6", "record_id": "flaws_cloudtrail:0000076:9c69751-feb7-47e7-a34f-9c802a36b7f6", "row_index": 76, "timestamp": "2018-10-19T00:41:16Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c69751-feb7-47e7-a34f-9c802a36b7f6", "eventTime": "2018-10-19T00:41:16Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3b325a8-4b29-4c24-a6ac-a74201054933", "record_id": "flaws_cloudtrail:0000077:b3b325a8-4b29-4c24-a6ac-a74201054933", "row_index": 77, "timestamp": "2018-10-19T00:41:16Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3b325a8-4b29-4c24-a6ac-a74201054933", "eventTime": "2018-10-19T00:41:16Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89788bf-2888-4e1c-8f94-62bc1c69f813", "record_id": "flaws_cloudtrail:0000078:89788bf-2888-4e1c-8f94-62bc1c69f813", "row_index": 78, "timestamp": "2018-10-19T00:41:16Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89788bf-2888-4e1c-8f94-62bc1c69f813", "eventTime": "2018-10-19T00:41:16Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e514b17-a755-40a7-b714-131602b06bfb", "record_id": "flaws_cloudtrail:0000079:8e514b17-a755-40a7-b714-131602b06bfb", "row_index": 79, "timestamp": "2018-10-19T00:41:16Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e514b17-a755-40a7-b714-131602b06bfb", "eventTime": "2018-10-19T00:41:16Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75d9d71f-9662-4f88-8edb-bc4140919ca7", "record_id": "flaws_cloudtrail:0000080:75d9d71f-9662-4f88-8edb-bc4140919ca7", "row_index": 80, "timestamp": "2018-10-19T00:41:16Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75d9d71f-9662-4f88-8edb-bc4140919ca7", "eventTime": "2018-10-19T00:41:16Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "876ccf3a-4088-4143-99e1-739d3b3dce14", "record_id": "flaws_cloudtrail:0000081:876ccf3a-4088-4143-99e1-739d3b3dce14", "row_index": 81, "timestamp": "2018-10-19T00:41:16Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "876ccf3a-4088-4143-99e1-739d3b3dce14", "eventTime": "2018-10-19T00:41:16Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da0f352b-b6e4-4f7f-8b61-9bbb5f1e775b", "record_id": "flaws_cloudtrail:0000082:da0f352b-b6e4-4f7f-8b61-9bbb5f1e775b", "row_index": 82, "timestamp": "2018-10-19T00:41:17Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da0f352b-b6e4-4f7f-8b61-9bbb5f1e775b", "eventTime": "2018-10-19T00:41:17Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9ede66b-73d1-4b16-8af5-e3083cfdea97", "record_id": "flaws_cloudtrail:0000083:b9ede66b-73d1-4b16-8af5-e3083cfdea97", "row_index": 83, "timestamp": "2018-10-19T00:41:17Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9ede66b-73d1-4b16-8af5-e3083cfdea97", "eventTime": "2018-10-19T00:41:17Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59b13c9e-dc27-4cbd-9456-785264ec94d7c", "record_id": "flaws_cloudtrail:0000084:59b13c9e-dc27-4cbd-9456-785264ec94d7c", "row_index": 84, "timestamp": "2018-10-19T00:41:17Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59b13c9e-dc27-4cbd-9456-785264ec94d7c", "eventTime": "2018-10-19T00:41:17Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f37da8c-5208-4d20-b563-6be54f99f7f4", "record_id": "flaws_cloudtrail:0000085:0f37da8c-5208-4d20-b563-6be54f99f7f4", "row_index": 85, "timestamp": "2018-10-19T00:41:17Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f37da8c-5208-4d20-b563-6be54f99f7f4", "eventTime": "2018-10-19T00:41:17Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a02a07bf-3ac4-47b0-8c23-5c286b9e502f", "record_id": "flaws_cloudtrail:0000086:a02a07bf-3ac4-47b0-8c23-5c286b9e502f", "row_index": 86, "timestamp": "2018-10-19T00:41:17Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a02a07bf-3ac4-47b0-8c23-5c286b9e502f", "eventTime": "2018-10-19T00:41:17Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8077c6ba-83b1-4908-9ffc-dd899695ee5e", "record_id": "flaws_cloudtrail:0000087:8077c6ba-83b1-4908-9ffc-dd899695ee5e", "row_index": 87, "timestamp": "2018-10-19T00:41:17Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8077c6ba-83b1-4908-9ffc-dd899695ee5e", "eventTime": "2018-10-19T00:41:17Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "271362ef-c7b1-44b4-a0c8-35a463d414b9", "record_id": "flaws_cloudtrail:0000088:271362ef-c7b1-44b4-a0c8-35a463d414b9", "row_index": 88, "timestamp": "2018-10-19T00:41:17Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "271362ef-c7b1-44b4-a0c8-35a463d414b9", "eventTime": "2018-10-19T00:41:17Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f8e4db4-ca01-4f21-b751-74c07bc47b87", "record_id": "flaws_cloudtrail:0000089:4f8e4db4-ca01-4f21-b751-74c07bc47b87", "row_index": 89, "timestamp": "2018-10-19T00:41:17Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f8e4db4-ca01-4f21-b751-74c07bc47b87", "eventTime": "2018-10-19T00:41:17Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e2267cd-aab0-4d72-a045-d08c880fd846", "record_id": "flaws_cloudtrail:0000090:1e2267cd-aab0-4d72-a045-d08c880fd846", "row_index": 90, "timestamp": "2018-10-19T00:41:17Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e2267cd-aab0-4d72-a045-d08c880fd846", "eventTime": "2018-10-19T00:41:17Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "862b0576-ca08-47a4-9c4b-a185e1f3eef4", "record_id": "flaws_cloudtrail:0000091:862b0576-ca08-47a4-9c4b-a185e1f3eef4", "row_index": 91, "timestamp": "2018-10-19T00:41:17Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "862b0576-ca08-47a4-9c4b-a185e1f3eef4", "eventTime": "2018-10-19T00:41:17Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "027c6e7c-1e31-4605-97b7-0c6a82d508f1", "record_id": "flaws_cloudtrail:0000092:027c6e7c-1e31-4605-97b7-0c6a82d508f1", "row_index": 92, "timestamp": "2018-10-19T00:41:21Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "027c6e7c-1e31-4605-97b7-0c6a82d508f1", "eventTime": "2018-10-19T00:41:21Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "976b4b18-1342-4467-91f0-391fa08df6a4", "record_id": "flaws_cloudtrail:0000093:976b4b18-1342-4467-91f0-391fa08df6a4", "row_index": 93, "timestamp": "2018-10-19T00:41:21Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "976b4b18-1342-4467-91f0-391fa08df6a4", "eventTime": "2018-10-19T00:41:21Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d56448a8-854c-4df1-a495-102d7e500649a", "record_id": "flaws_cloudtrail:0000094:d56448a8-854c-4df1-a495-102d7e500649a", "row_index": 94, "timestamp": "2018-10-19T00:41:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d56448a8-854c-4df1-a495-102d7e500649a", "eventTime": "2018-10-19T00:41:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a60575d-5500-4d33-93de-22ab636fb8fd", "record_id": "flaws_cloudtrail:0000095:a60575d-5500-4d33-93de-22ab636fb8fd", "row_index": 95, "timestamp": "2018-10-19T00:41:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a60575d-5500-4d33-93de-22ab636fb8fd", "eventTime": "2018-10-19T00:41:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be9e57c2-c1ea-4fbc-99fd-5fefa92c9b61", "record_id": "flaws_cloudtrail:0000096:be9e57c2-c1ea-4fbc-99fd-5fefa92c9b61", "row_index": 96, "timestamp": "2018-10-19T00:41:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be9e57c2-c1ea-4fbc-99fd-5fefa92c9b61", "eventTime": "2018-10-19T00:41:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "677bb221-ee16-478d-9181-eee5d2c5d504", "record_id": "flaws_cloudtrail:0000097:677bb221-ee16-478d-9181-eee5d2c5d504", "row_index": 97, "timestamp": "2018-10-19T00:41:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "677bb221-ee16-478d-9181-eee5d2c5d504", "eventTime": "2018-10-19T00:41:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dfd7b52-9b8a-4e49-b4a6-e4b6864e31d8", "record_id": "flaws_cloudtrail:0000098:3dfd7b52-9b8a-4e49-b4a6-e4b6864e31d8", "row_index": 98, "timestamp": "2018-10-19T00:41:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dfd7b52-9b8a-4e49-b4a6-e4b6864e31d8", "eventTime": "2018-10-19T00:41:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18ce95ca-e44a-4fcc-871d-6c1f582b8e5e", "record_id": "flaws_cloudtrail:0000099:18ce95ca-e44a-4fcc-871d-6c1f582b8e5e", "row_index": 99, "timestamp": "2018-10-19T00:41:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18ce95ca-e44a-4fcc-871d-6c1f582b8e5e", "eventTime": "2018-10-19T00:41:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f61ab817-8e06-4dc9-9175-df30714b046", "record_id": "flaws_cloudtrail:0000100:f61ab817-8e06-4dc9-9175-df30714b046", "row_index": 100, "timestamp": "2018-10-19T00:41:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f61ab817-8e06-4dc9-9175-df30714b046", "eventTime": "2018-10-19T00:41:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e527e6ff-59e1-4bb0-888a-d089b5736d25", "record_id": "flaws_cloudtrail:0000101:e527e6ff-59e1-4bb0-888a-d089b5736d25", "row_index": 101, "timestamp": "2018-10-19T00:41:22Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e527e6ff-59e1-4bb0-888a-d089b5736d25", "eventTime": "2018-10-19T00:41:22Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "549c63ee-8b32-45c4-924e-7d7bd76c4bc1", "record_id": "flaws_cloudtrail:0000102:549c63ee-8b32-45c4-924e-7d7bd76c4bc1", "row_index": 102, "timestamp": "2018-10-19T00:41:23Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "549c63ee-8b32-45c4-924e-7d7bd76c4bc1", "eventTime": "2018-10-19T00:41:23Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2f196c4-d495-4979-ba14-ee0f99ea9ed8", "record_id": "flaws_cloudtrail:0000103:b2f196c4-d495-4979-ba14-ee0f99ea9ed8", "row_index": 103, "timestamp": "2018-10-19T00:41:23Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2f196c4-d495-4979-ba14-ee0f99ea9ed8", "eventTime": "2018-10-19T00:41:23Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bac974d0-c0d5-4412-bac8-dc9644c16274", "record_id": "flaws_cloudtrail:0000104:bac974d0-c0d5-4412-bac8-dc9644c16274", "row_index": 104, "timestamp": "2018-10-19T00:41:23Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bac974d0-c0d5-4412-bac8-dc9644c16274", "eventTime": "2018-10-19T00:41:23Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5117aab-ebe4-460b-a702-35ead75473d", "record_id": "flaws_cloudtrail:0000105:b5117aab-ebe4-460b-a702-35ead75473d", "row_index": 105, "timestamp": "2018-10-19T00:41:23Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5117aab-ebe4-460b-a702-35ead75473d", "eventTime": "2018-10-19T00:41:23Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "beb032da-8086-4abb-997f-4444d77961ec", "record_id": "flaws_cloudtrail:0000106:beb032da-8086-4abb-997f-4444d77961ec", "row_index": 106, "timestamp": "2018-10-19T00:41:23Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "beb032da-8086-4abb-997f-4444d77961ec", "eventTime": "2018-10-19T00:41:23Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "456dc0e2-ba27-4ab9-98c3-0aced4cce985", "record_id": "flaws_cloudtrail:0000107:456dc0e2-ba27-4ab9-98c3-0aced4cce985", "row_index": 107, "timestamp": "2018-10-19T00:41:24Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "456dc0e2-ba27-4ab9-98c3-0aced4cce985", "eventTime": "2018-10-19T00:41:24Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "172c91d3-8b74-4d24-b0a0-58cd008440", "record_id": "flaws_cloudtrail:0000108:172c91d3-8b74-4d24-b0a0-58cd008440", "row_index": 108, "timestamp": "2018-10-19T00:41:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "172c91d3-8b74-4d24-b0a0-58cd008440", "eventTime": "2018-10-19T00:41:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0d082123-bcb2-4ff5-911b-1adb980321b9", "record_id": "flaws_cloudtrail:0000109:e0d082123-bcb2-4ff5-911b-1adb980321b9", "row_index": 109, "timestamp": "2018-10-19T00:41:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0d082123-bcb2-4ff5-911b-1adb980321b9", "eventTime": "2018-10-19T00:41:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c619acd-6ef2-4791-b551-d49ef144c8d4", "record_id": "flaws_cloudtrail:0000110:4c619acd-6ef2-4791-b551-d49ef144c8d4", "row_index": 110, "timestamp": "2018-10-19T00:41:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c619acd-6ef2-4791-b551-d49ef144c8d4", "eventTime": "2018-10-19T00:41:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be99e593-8252-43b2-b07f-670e2647490c", "record_id": "flaws_cloudtrail:0000111:be99e593-8252-43b2-b07f-670e2647490c", "row_index": 111, "timestamp": "2018-10-19T00:41:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be99e593-8252-43b2-b07f-670e2647490c", "eventTime": "2018-10-19T00:41:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60a2996a-38a9-49a5-8aff-d04b4dab46d8", "record_id": "flaws_cloudtrail:0000112:60a2996a-38a9-49a5-8aff-d04b4dab46d8", "row_index": 112, "timestamp": "2018-10-19T00:41:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60a2996a-38a9-49a5-8aff-d04b4dab46d8", "eventTime": "2018-10-19T00:41:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47cae2ce-2d12-4dd1-981c-5a94f487c559", "record_id": "flaws_cloudtrail:0000113:47cae2ce-2d12-4dd1-981c-5a94f487c559", "row_index": 113, "timestamp": "2018-10-19T00:41:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47cae2ce-2d12-4dd1-981c-5a94f487c559", "eventTime": "2018-10-19T00:41:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb7e0bfd-832a-49a5-8fc4-8630c63f06e2", "record_id": "flaws_cloudtrail:0000114:eb7e0bfd-832a-49a5-8fc4-8630c63f06e2", "row_index": 114, "timestamp": "2018-10-19T00:41:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb7e0bfd-832a-49a5-8fc4-8630c63f06e2", "eventTime": "2018-10-19T00:41:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcd67b01-d69a-4f15-9a7e-afb58f7b2f8e", "record_id": "flaws_cloudtrail:0000115:dcd67b01-d69a-4f15-9a7e-afb58f7b2f8e", "row_index": 115, "timestamp": "2018-10-19T00:41:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcd67b01-d69a-4f15-9a7e-afb58f7b2f8e", "eventTime": "2018-10-19T00:41:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1080e885-c434-4442-b2d6-416158802233", "record_id": "flaws_cloudtrail:0000116:1080e885-c434-4442-b2d6-416158802233", "row_index": 116, "timestamp": "2018-10-19T00:41:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1080e885-c434-4442-b2d6-416158802233", "eventTime": "2018-10-19T00:41:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f37b5a31-0be1-40f0-859b-f377026aa5a0", "record_id": "flaws_cloudtrail:0000117:f37b5a31-0be1-40f0-859b-f377026aa5a0", "row_index": 117, "timestamp": "2018-10-19T00:41:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f37b5a31-0be1-40f0-859b-f377026aa5a0", "eventTime": "2018-10-19T00:41:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edcd5226-6976-464c-af47-66a4e19d010a", "record_id": "flaws_cloudtrail:0000118:edcd5226-6976-464c-af47-66a4e19d010a", "row_index": 118, "timestamp": "2018-10-19T00:41:30Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edcd5226-6976-464c-af47-66a4e19d010a", "eventTime": "2018-10-19T00:41:30Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c48124b5-317b-47a0-a117-34a6962b507a", "record_id": "flaws_cloudtrail:0000119:c48124b5-317b-47a0-a117-34a6962b507a", "row_index": 119, "timestamp": "2018-10-19T00:41:30Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c48124b5-317b-47a0-a117-34a6962b507a", "eventTime": "2018-10-19T00:41:30Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af4288fb-b548-402e-89a9-3b79b20013f", "record_id": "flaws_cloudtrail:0000120:af4288fb-b548-402e-89a9-3b79b20013f", "row_index": 120, "timestamp": "2018-10-19T00:41:30Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af4288fb-b548-402e-89a9-3b79b20013f", "eventTime": "2018-10-19T00:41:30Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01ba42a2-723d-4fdb-8196-4fa3d314fe24", "record_id": "flaws_cloudtrail:0000121:01ba42a2-723d-4fdb-8196-4fa3d314fe24", "row_index": 121, "timestamp": "2018-10-19T00:41:30Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01ba42a2-723d-4fdb-8196-4fa3d314fe24", "eventTime": "2018-10-19T00:41:30Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b900136-49a1-4de1-a412-e37f222e5941", "record_id": "flaws_cloudtrail:0000122:7b900136-49a1-4de1-a412-e37f222e5941", "row_index": 122, "timestamp": "2018-10-19T00:41:30Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b900136-49a1-4de1-a412-e37f222e5941", "eventTime": "2018-10-19T00:41:30Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53f1d2c1-02b0-49e5-9b64-0417a2b66612", "record_id": "flaws_cloudtrail:0000123:53f1d2c1-02b0-49e5-9b64-0417a2b66612", "row_index": 123, "timestamp": "2018-10-19T00:41:38Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53f1d2c1-02b0-49e5-9b64-0417a2b66612", "eventTime": "2018-10-19T00:41:38Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ee887122-c4f0-44f1-8317-8bece283af67", "record_id": "flaws_cloudtrail:0000124:2ee887122-c4f0-44f1-8317-8bece283af67", "row_index": 124, "timestamp": "2018-10-19T00:41:38Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ee887122-c4f0-44f1-8317-8bece283af67", "eventTime": "2018-10-19T00:41:38Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3361dac-c1ae-4410-a1f4-8259f0f83ada", "record_id": "flaws_cloudtrail:0000125:f3361dac-c1ae-4410-a1f4-8259f0f83ada", "row_index": 125, "timestamp": "2018-10-19T00:41:38Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3361dac-c1ae-4410-a1f4-8259f0f83ada", "eventTime": "2018-10-19T00:41:38Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4675fd0-d9b3-4b99-9db7-f6dfffdfdd1a", "record_id": "flaws_cloudtrail:0000126:f4675fd0-d9b3-4b99-9db7-f6dfffdfdd1a", "row_index": 126, "timestamp": "2018-10-19T00:41:38Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4675fd0-d9b3-4b99-9db7-f6dfffdfdd1a", "eventTime": "2018-10-19T00:41:38Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3956dd5-196d-43c0-85ae-9dab17d2d115", "record_id": "flaws_cloudtrail:0000127:a3956dd5-196d-43c0-85ae-9dab17d2d115", "row_index": 127, "timestamp": "2018-10-19T00:41:39Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3956dd5-196d-43c0-85ae-9dab17d2d115", "eventTime": "2018-10-19T00:41:39Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a723950a-78ae-4402-a6b5-0febe2ca6871", "record_id": "flaws_cloudtrail:0000128:a723950a-78ae-4402-a6b5-0febe2ca6871", "row_index": 128, "timestamp": "2018-10-19T00:41:39Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a723950a-78ae-4402-a6b5-0febe2ca6871", "eventTime": "2018-10-19T00:41:39Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a844196-24bf-435e-b616-19ed379539de1", "record_id": "flaws_cloudtrail:0000129:a844196-24bf-435e-b616-19ed379539de1", "row_index": 129, "timestamp": "2018-10-19T00:41:39Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a844196-24bf-435e-b616-19ed379539de1", "eventTime": "2018-10-19T00:41:39Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49dcce61-985f-4597-bf82-df7179cf32ac", "record_id": "flaws_cloudtrail:0000130:49dcce61-985f-4597-bf82-df7179cf32ac", "row_index": 130, "timestamp": "2018-10-19T00:41:40Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49dcce61-985f-4597-bf82-df7179cf32ac", "eventTime": "2018-10-19T00:41:40Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84b4885c-12de-4aba-8349-395308a94240", "record_id": "flaws_cloudtrail:0000131:84b4885c-12de-4aba-8349-395308a94240", "row_index": 131, "timestamp": "2018-10-19T00:41:41Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84b4885c-12de-4aba-8349-395308a94240", "eventTime": "2018-10-19T00:41:41Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39505-8331-426a-b17a-ed46e39abafe", "record_id": "flaws_cloudtrail:0000132:39505-8331-426a-b17a-ed46e39abafe", "row_index": 132, "timestamp": "2018-10-19T00:41:41Z", "event_type": "DescribeSSLPolicies", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 6757, "raw_record_depth": 6, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39505-8331-426a-b17a-ed46e39abafe", "eventTime": "2018-10-19T00:41:41Z", "eventName": "DescribeSSLPolicies", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"names": []}, "responseElements": {"sslPolicies": [{"name": "ELBSecurityPolicy-2016-08", "sslProtocols": ["TLSv1", "TLSv1.1", "TLSv1.2"], "ciphers": [{"priority": 1, "name": "ECDHE-ECDSA-AES128-GCM-SHA256"}, {"priority": 2, "name": "ECDHE-RSA-AES128-GCM-SHA256"}, {"priority": 3, "name": "ECDHE-ECDSA-AES128-SHA256"}, {"priority": 4, "name": "ECDHE-RSA-AES128-SHA256"}, {"priority": 5, "name": "ECDHE-ECDSA-AES128-SHA"}, {"priority": 6, "name": "ECDHE-RSA-AES128-SHA"}, {"__truncated_len": 12}]}, {"name": "ELBSecurityPolicy-TLS-1-2-2017-01", "sslProtocols": ["TLSv1.2"], "ciphers": [{"priority": 1, "name": "ECDHE-ECDSA-AES128-GCM-SHA256"}, {"priority": 2, "name": "ECDHE-RSA-AES128-GCM-SHA256"}, {"priority": 3, "name": "ECDHE-ECDSA-AES128-SHA256"}, {"priority": 4, "name": "ECDHE-RSA-AES128-SHA256"}, {"priority": 5, "name": "ECDHE-ECDSA-AES256-GCM-SHA384"}, {"priority": 6, "name": "ECDHE-RSA-AES256-GCM-SHA384"}, {"__truncated_len": 6}]}, {"name": "ELBSecurityPolicy-TLS-1-1-2017-01", "sslProtocols": ["TLSv1.1", "TLSv1.2"], "ciphers": [{"priority": 1, "name": "ECDHE-ECDSA-AES128-GCM-SHA256"}, {"priority": 2, "name": "ECDHE-RSA-AES128-GCM-SHA256"}, {"priority": 3, "name": "ECDHE-ECDSA-AES128-SHA256"}, {"priority": 4, "name": "ECDHE-RSA-AES128-SHA256"}, {"priority": 5, "name": "ECDHE-ECDSA-AES128-SHA"}, {"priority": 6, "name": "ECDHE-RSA-AES128-SHA"}, {"__truncated_len": 12}]}, {"name": "ELBSecurityPolicy-TLS-1-2-Ext-2018-06", "sslProtocols": ["TLSv1.2"], "ciphers": [{"priority": 1, "name": "ECDHE-ECDSA-AES128-GCM-SHA256"}, {"priority": 2, "name": "ECDHE-RSA-AES128-GCM-SHA256"}, {"priority": 3, "name": "ECDHE-ECDSA-AES128-SHA256"}, {"priority": 4, "name": "ECDHE-RSA-AES128-SHA256"}, {"priority": 5, "name": "ECDHE-ECDSA-AES128-SHA"}, {"priority": 6, "name": "ECDHE-RSA-AES128-SHA"}, {"__truncated_len": 12}]}, {"name": "ELBSecurityPolicy-FS-2018-06", "sslProtocols": ["TLSv1", "TLSv1.1", "TLSv1.2"], "ciphers": [{"priority": 1, "name": "ECDHE-ECDSA-AES128-GCM-SHA256"}, {"priority": 2, "name": "ECDHE-RSA-AES128-GCM-SHA256"}, {"priority": 3, "name": "ECDHE-ECDSA-AES128-SHA256"}, {"priority": 4, "name": "ECDHE-RSA-AES128-SHA256"}, {"priority": 5, "name": "ECDHE-ECDSA-AES128-SHA"}, {"priority": 6, "name": "ECDHE-RSA-AES128-SHA"}, {"__truncated_len": 6}]}, {"name": "ELBSecurityPolicy-2015-05", "sslProtocols": ["TLSv1", "TLSv1.1", "TLSv1.2"], "ciphers": [{"priority": 1, "name": "ECDHE-ECDSA-AES128-GCM-SHA256"}, {"priority": 2, "name": "ECDHE-RSA-AES128-GCM-SHA256"}, {"priority": 3, "name": "ECDHE-ECDSA-AES128-SHA256"}, {"priority": 4, "name": "ECDHE-RSA-AES128-SHA256"}, {"priority": 5, "name": "ECDHE-ECDSA-AES128-SHA"}, {"priority": 6, "name": "ECDHE-RSA-AES128-SHA"}, {"__truncated_len": 12}]}, {"__truncated_len": 1}]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b16c151-f89a-4139-9d4e-3654c4e0c27c", "record_id": "flaws_cloudtrail:0000133:2b16c151-f89a-4139-9d4e-3654c4e0c27c", "row_index": 133, "timestamp": "2018-10-19T00:41:41Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b16c151-f89a-4139-9d4e-3654c4e0c27c", "eventTime": "2018-10-19T00:41:41Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6f7dd1e-3039-48e4-9572-d1bf65a179837", "record_id": "flaws_cloudtrail:0000134:c6f7dd1e-3039-48e4-9572-d1bf65a179837", "row_index": 134, "timestamp": "2018-10-19T00:41:41Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6f7dd1e-3039-48e4-9572-d1bf65a179837", "eventTime": "2018-10-19T00:41:41Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1798fff-3045-4515-b15f-7d64a0e175e8", "record_id": "flaws_cloudtrail:0000135:d1798fff-3045-4515-b15f-7d64a0e175e8", "row_index": 135, "timestamp": "2018-10-19T00:41:41Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1798fff-3045-4515-b15f-7d64a0e175e8", "eventTime": "2018-10-19T00:41:41Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85456ee4-97f3-4936-b97d-5edc8ac28b5c", "record_id": "flaws_cloudtrail:0000136:85456ee4-97f3-4936-b97d-5edc8ac28b5c", "row_index": 136, "timestamp": "2018-10-19T00:41:41Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85456ee4-97f3-4936-b97d-5edc8ac28b5c", "eventTime": "2018-10-19T00:41:41Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97579ee-6f55-4f9d-a051-1cd2e86a24db", "record_id": "flaws_cloudtrail:0000137:97579ee-6f55-4f9d-a051-1cd2e86a24db", "row_index": 137, "timestamp": "2018-10-19T00:41:41Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97579ee-6f55-4f9d-a051-1cd2e86a24db", "eventTime": "2018-10-19T00:41:41Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ab77291-4104-419e-b4dc-7303285f2456", "record_id": "flaws_cloudtrail:0000138:3ab77291-4104-419e-b4dc-7303285f2456", "row_index": 138, "timestamp": "2018-10-19T00:41:41Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ab77291-4104-419e-b4dc-7303285f2456", "eventTime": "2018-10-19T00:41:41Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a733421ff-3711-4378-8672-cb20d580482aa", "record_id": "flaws_cloudtrail:0000139:a733421ff-3711-4378-8672-cb20d580482aa", "row_index": 139, "timestamp": "2018-10-19T00:41:41Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a733421ff-3711-4378-8672-cb20d580482aa", "eventTime": "2018-10-19T00:41:41Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "952fadae-9aee-47d2-b423-16d1b4dd67b1", "record_id": "flaws_cloudtrail:0000140:952fadae-9aee-47d2-b423-16d1b4dd67b1", "row_index": 140, "timestamp": "2018-10-19T00:41:41Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "952fadae-9aee-47d2-b423-16d1b4dd67b1", "eventTime": "2018-10-19T00:41:41Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3aecb2f9-39ee-46c9-9a74-e39650ac538a", "record_id": "flaws_cloudtrail:0000141:3aecb2f9-39ee-46c9-9a74-e39650ac538a", "row_index": 141, "timestamp": "2018-10-19T00:41:41Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3aecb2f9-39ee-46c9-9a74-e39650ac538a", "eventTime": "2018-10-19T00:41:41Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a7e0a1c-a4e0-4a9f-a09c-ceea3233d7ba", "record_id": "flaws_cloudtrail:0000142:6a7e0a1c-a4e0-4a9f-a09c-ceea3233d7ba", "row_index": 142, "timestamp": "2018-10-19T00:41:42Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a7e0a1c-a4e0-4a9f-a09c-ceea3233d7ba", "eventTime": "2018-10-19T00:41:42Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec5089bf-a9dd-4266-8612-5de76ed9a326", "record_id": "flaws_cloudtrail:0000143:ec5089bf-a9dd-4266-8612-5de76ed9a326", "row_index": 143, "timestamp": "2018-10-19T00:41:42Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec5089bf-a9dd-4266-8612-5de76ed9a326", "eventTime": "2018-10-19T00:41:42Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef2dcc3f-5435-4375-8863-b2a804fb5255", "record_id": "flaws_cloudtrail:0000144:ef2dcc3f-5435-4375-8863-b2a804fb5255", "row_index": 144, "timestamp": "2018-10-19T00:41:42Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef2dcc3f-5435-4375-8863-b2a804fb5255", "eventTime": "2018-10-19T00:41:42Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52a6c4b1-7f09-4526-afe8-225bf6292c28", "record_id": "flaws_cloudtrail:0000145:52a6c4b1-7f09-4526-afe8-225bf6292c28", "row_index": 145, "timestamp": "2018-10-19T00:41:42Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52a6c4b1-7f09-4526-afe8-225bf6292c28", "eventTime": "2018-10-19T00:41:42Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d939dab2-5421-462c-a1d7-135b724b2879", "record_id": "flaws_cloudtrail:0000146:d939dab2-5421-462c-a1d7-135b724b2879", "row_index": 146, "timestamp": "2018-10-19T00:41:46Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d939dab2-5421-462c-a1d7-135b724b2879", "eventTime": "2018-10-19T00:41:46Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b65ce3b-232a-4c8f-b4b6-261a2a41af21", "record_id": "flaws_cloudtrail:0000147:0b65ce3b-232a-4c8f-b4b6-261a2a41af21", "row_index": 147, "timestamp": "2018-10-19T00:41:47Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b65ce3b-232a-4c8f-b4b6-261a2a41af21", "eventTime": "2018-10-19T00:41:47Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d14535f-5fee-43de-bf9b-21b7575542d4", "record_id": "flaws_cloudtrail:0000148:d14535f-5fee-43de-bf9b-21b7575542d4", "row_index": 148, "timestamp": "2018-10-19T00:41:47Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d14535f-5fee-43de-bf9b-21b7575542d4", "eventTime": "2018-10-19T00:41:47Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1f4ee6e-1be2-44aa-95c2-aa760a054fee", "record_id": "flaws_cloudtrail:0000149:f1f4ee6e-1be2-44aa-95c2-aa760a054fee", "row_index": 149, "timestamp": "2018-10-19T00:41:47Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1f4ee6e-1be2-44aa-95c2-aa760a054fee", "eventTime": "2018-10-19T00:41:47Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2214ed71-b0ce-4330-9c8f-524990c2e6b7", "record_id": "flaws_cloudtrail:0000150:2214ed71-b0ce-4330-9c8f-524990c2e6b7", "row_index": 150, "timestamp": "2018-10-19T00:41:47Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2214ed71-b0ce-4330-9c8f-524990c2e6b7", "eventTime": "2018-10-19T00:41:47Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2d298e7-005c-48ec-adaf-2394af878810", "record_id": "flaws_cloudtrail:0000151:f2d298e7-005c-48ec-adaf-2394af878810", "row_index": 151, "timestamp": "2018-10-19T00:41:47Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2d298e7-005c-48ec-adaf-2394af878810", "eventTime": "2018-10-19T00:41:47Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26ad3df1-ec16-488f-a67e-64c2b0f6dd1e", "record_id": "flaws_cloudtrail:0000152:26ad3df1-ec16-488f-a67e-64c2b0f6dd1e", "row_index": 152, "timestamp": "2018-10-19T00:41:47Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26ad3df1-ec16-488f-a67e-64c2b0f6dd1e", "eventTime": "2018-10-19T00:41:47Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a0f99a8-8f79-45d1-8266-5cc0a09fa8d5", "record_id": "flaws_cloudtrail:0000153:6a0f99a8-8f79-45d1-8266-5cc0a09fa8d5", "row_index": 153, "timestamp": "2018-10-19T00:41:47Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a0f99a8-8f79-45d1-8266-5cc0a09fa8d5", "eventTime": "2018-10-19T00:41:47Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fcac1ec-9b58-4e3b-8f93-4055df0921cd", "record_id": "flaws_cloudtrail:0000154:4fcac1ec-9b58-4e3b-8f93-4055df0921cd", "row_index": 154, "timestamp": "2018-10-19T00:41:48Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fcac1ec-9b58-4e3b-8f93-4055df0921cd", "eventTime": "2018-10-19T00:41:48Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eade090b-fdff-452c-9e9a-2de244cd7279", "record_id": "flaws_cloudtrail:0000155:eade090b-fdff-452c-9e9a-2de244cd7279", "row_index": 155, "timestamp": "2018-10-19T00:41:48Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eade090b-fdff-452c-9e9a-2de244cd7279", "eventTime": "2018-10-19T00:41:48Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c81b15be-aafd-40a4-b392-6486a18d17e1", "record_id": "flaws_cloudtrail:0000156:c81b15be-aafd-40a4-b392-6486a18d17e1", "row_index": 156, "timestamp": "2018-10-19T00:41:49Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c81b15be-aafd-40a4-b392-6486a18d17e1", "eventTime": "2018-10-19T00:41:49Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "285ec6b6-4e32-4d33-a6f4-ef71d228b400", "record_id": "flaws_cloudtrail:0000157:285ec6b6-4e32-4d33-a6f4-ef71d228b400", "row_index": 157, "timestamp": "2018-10-19T00:41:49Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "285ec6b6-4e32-4d33-a6f4-ef71d228b400", "eventTime": "2018-10-19T00:41:49Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb89f497-b383-4c9c-b135-872fea9b097e", "record_id": "flaws_cloudtrail:0000158:fb89f497-b383-4c9c-b135-872fea9b097e", "row_index": 158, "timestamp": "2018-10-19T00:41:49Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb89f497-b383-4c9c-b135-872fea9b097e", "eventTime": "2018-10-19T00:41:49Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8260ad9-8f44-4738-bfd0-55bc4dfe5330", "record_id": "flaws_cloudtrail:0000159:f8260ad9-8f44-4738-bfd0-55bc4dfe5330", "row_index": 159, "timestamp": "2018-10-19T00:41:49Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8260ad9-8f44-4738-bfd0-55bc4dfe5330", "eventTime": "2018-10-19T00:41:49Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73c2df9d-73b8-439c-8ace-b05fb915e3a9", "record_id": "flaws_cloudtrail:0000160:73c2df9d-73b8-439c-8ace-b05fb915e3a9", "row_index": 160, "timestamp": "2018-10-19T00:41:49Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73c2df9d-73b8-439c-8ace-b05fb915e3a9", "eventTime": "2018-10-19T00:41:49Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da3829d1-91fb-4221-a8ae-56803289c794", "record_id": "flaws_cloudtrail:0000161:da3829d1-91fb-4221-a8ae-56803289c794", "row_index": 161, "timestamp": "2018-10-19T00:41:53Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da3829d1-91fb-4221-a8ae-56803289c794", "eventTime": "2018-10-19T00:41:53Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed21120a-26c2-4698-bd56-9a6323eeaafb", "record_id": "flaws_cloudtrail:0000162:ed21120a-26c2-4698-bd56-9a6323eeaafb", "row_index": 162, "timestamp": "2018-10-19T00:41:54Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed21120a-26c2-4698-bd56-9a6323eeaafb", "eventTime": "2018-10-19T00:41:54Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21dc8909-7fed-4648-a8e4-649b5d4c8a7f", "record_id": "flaws_cloudtrail:0000163:21dc8909-7fed-4648-a8e4-649b5d4c8a7f", "row_index": 163, "timestamp": "2018-10-19T00:41:54Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21dc8909-7fed-4648-a8e4-649b5d4c8a7f", "eventTime": "2018-10-19T00:41:54Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30aa1f3a-e38e-4d38-acaf-df3ef9060d0e", "record_id": "flaws_cloudtrail:0000164:30aa1f3a-e38e-4d38-acaf-df3ef9060d0e", "row_index": 164, "timestamp": "2018-10-19T00:41:54Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30aa1f3a-e38e-4d38-acaf-df3ef9060d0e", "eventTime": "2018-10-19T00:41:54Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7adbdaa1-be6d-4014-b5d7-564274cdcc", "record_id": "flaws_cloudtrail:0000165:7adbdaa1-be6d-4014-b5d7-564274cdcc", "row_index": 165, "timestamp": "2018-10-19T00:41:55Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7adbdaa1-be6d-4014-b5d7-564274cdcc", "eventTime": "2018-10-19T00:41:55Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12a8fa5a-cd08-4855-b06e-aeebee11c6ef", "record_id": "flaws_cloudtrail:0000166:12a8fa5a-cd08-4855-b06e-aeebee11c6ef", "row_index": 166, "timestamp": "2018-10-19T00:41:55Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12a8fa5a-cd08-4855-b06e-aeebee11c6ef", "eventTime": "2018-10-19T00:41:55Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27619f86-fc8e-49ca-9a74-dcbbaacd53ee", "record_id": "flaws_cloudtrail:0000167:27619f86-fc8e-49ca-9a74-dcbbaacd53ee", "row_index": 167, "timestamp": "2018-10-19T00:41:55Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27619f86-fc8e-49ca-9a74-dcbbaacd53ee", "eventTime": "2018-10-19T00:41:55Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f72b19b-640d-4a8b-adb0-2b0e1e6955bd", "record_id": "flaws_cloudtrail:0000168:8f72b19b-640d-4a8b-adb0-2b0e1e6955bd", "row_index": 168, "timestamp": "2018-10-19T00:41:55Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f72b19b-640d-4a8b-adb0-2b0e1e6955bd", "eventTime": "2018-10-19T00:41:55Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64b59c74-24a0-43c0-b747-dd74e4bd67cf", "record_id": "flaws_cloudtrail:0000169:64b59c74-24a0-43c0-b747-dd74e4bd67cf", "row_index": 169, "timestamp": "2018-10-19T00:41:55Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64b59c74-24a0-43c0-b747-dd74e4bd67cf", "eventTime": "2018-10-19T00:41:55Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae5c5af7-9c0e-4234-89dc-73283a738925", "record_id": "flaws_cloudtrail:0000170:ae5c5af7-9c0e-4234-89dc-73283a738925", "row_index": 170, "timestamp": "2018-10-19T00:41:55Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae5c5af7-9c0e-4234-89dc-73283a738925", "eventTime": "2018-10-19T00:41:55Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48b2585a-b2d5-4dc0-9a4f-c0bc229e8353", "record_id": "flaws_cloudtrail:0000171:48b2585a-b2d5-4dc0-9a4f-c0bc229e8353", "row_index": 171, "timestamp": "2018-10-19T00:41:56Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48b2585a-b2d5-4dc0-9a4f-c0bc229e8353", "eventTime": "2018-10-19T00:41:56Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b368e116-aa90-4a06-8def-3efd9cee9dc8", "record_id": "flaws_cloudtrail:0000172:b368e116-aa90-4a06-8def-3efd9cee9dc8", "row_index": 172, "timestamp": "2018-10-19T00:41:56Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b368e116-aa90-4a06-8def-3efd9cee9dc8", "eventTime": "2018-10-19T00:41:56Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe5d3dba-5275-4ce0-a390-23fa1f318e51", "record_id": "flaws_cloudtrail:0000173:fe5d3dba-5275-4ce0-a390-23fa1f318e51", "row_index": 173, "timestamp": "2018-10-19T00:41:56Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe5d3dba-5275-4ce0-a390-23fa1f318e51", "eventTime": "2018-10-19T00:41:56Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e62b6a25-249f-4b7b-8ec9-74ed8b5da0de", "record_id": "flaws_cloudtrail:0000174:e62b6a25-249f-4b7b-8ec9-74ed8b5da0de", "row_index": 174, "timestamp": "2018-10-19T00:41:56Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e62b6a25-249f-4b7b-8ec9-74ed8b5da0de", "eventTime": "2018-10-19T00:41:56Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "641f00b6-050b-449c-8f19-3de62fd2d023", "record_id": "flaws_cloudtrail:0000175:641f00b6-050b-449c-8f19-3de62fd2d023", "row_index": 175, "timestamp": "2018-10-19T00:41:56Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "641f00b6-050b-449c-8f19-3de62fd2d023", "eventTime": "2018-10-19T00:41:56Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6a9df75-c572-47d6-9882-ffc6a59157c", "record_id": "flaws_cloudtrail:0000176:c6a9df75-c572-47d6-9882-ffc6a59157c", "row_index": 176, "timestamp": "2018-10-19T00:42:06Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6a9df75-c572-47d6-9882-ffc6a59157c", "eventTime": "2018-10-19T00:42:06Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc952382-841b-45f4-80dc-38193ffb2223", "record_id": "flaws_cloudtrail:0000177:fc952382-841b-45f4-80dc-38193ffb2223", "row_index": 177, "timestamp": "2018-10-19T00:42:06Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc952382-841b-45f4-80dc-38193ffb2223", "eventTime": "2018-10-19T00:42:06Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4b6294a-a82e-4d41-bee0-1e21a20e3653", "record_id": "flaws_cloudtrail:0000178:d4b6294a-a82e-4d41-bee0-1e21a20e3653", "row_index": 178, "timestamp": "2018-10-19T00:42:06Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4b6294a-a82e-4d41-bee0-1e21a20e3653", "eventTime": "2018-10-19T00:42:06Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "218326-4343-44aa-a4ec-d3ad9321b81e", "record_id": "flaws_cloudtrail:0000179:218326-4343-44aa-a4ec-d3ad9321b81e", "row_index": 179, "timestamp": "2018-10-19T00:42:06Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "218326-4343-44aa-a4ec-d3ad9321b81e", "eventTime": "2018-10-19T00:42:06Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34fe6a55-4cc6-4b87-9b20-186e8ee27f4f", "record_id": "flaws_cloudtrail:0000180:34fe6a55-4cc6-4b87-9b20-186e8ee27f4f", "row_index": 180, "timestamp": "2018-10-19T00:42:06Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34fe6a55-4cc6-4b87-9b20-186e8ee27f4f", "eventTime": "2018-10-19T00:42:06Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4983a131-2386-4df0-85f1-70f519911ce", "record_id": "flaws_cloudtrail:0000181:4983a131-2386-4df0-85f1-70f519911ce", "row_index": 181, "timestamp": "2018-10-19T00:42:06Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4983a131-2386-4df0-85f1-70f519911ce", "eventTime": "2018-10-19T00:42:06Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01bf2e66-0fe7-4ebf-92c3-b7b9bec4806c", "record_id": "flaws_cloudtrail:0000182:01bf2e66-0fe7-4ebf-92c3-b7b9bec4806c", "row_index": 182, "timestamp": "2018-10-19T00:42:06Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01bf2e66-0fe7-4ebf-92c3-b7b9bec4806c", "eventTime": "2018-10-19T00:42:06Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0d29140-ec4b-4f28-bd6a-4ec9f646a51a", "record_id": "flaws_cloudtrail:0000183:c0d29140-ec4b-4f28-bd6a-4ec9f646a51a", "row_index": 183, "timestamp": "2018-10-19T00:42:06Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0d29140-ec4b-4f28-bd6a-4ec9f646a51a", "eventTime": "2018-10-19T00:42:06Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0a2984a-68d5-436f-945d-936cec9cc6de", "record_id": "flaws_cloudtrail:0000184:f0a2984a-68d5-436f-945d-936cec9cc6de", "row_index": 184, "timestamp": "2018-10-19T00:42:06Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0a2984a-68d5-436f-945d-936cec9cc6de", "eventTime": "2018-10-19T00:42:06Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0dd1daf-8278-45b6-85ad-9fcbf2c85838", "record_id": "flaws_cloudtrail:0000185:a0dd1daf-8278-45b6-85ad-9fcbf2c85838", "row_index": 185, "timestamp": "2018-10-19T00:42:06Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0dd1daf-8278-45b6-85ad-9fcbf2c85838", "eventTime": "2018-10-19T00:42:06Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23bca201-ecf6-42ce-8258-3102ab0d115d", "record_id": "flaws_cloudtrail:0000186:23bca201-ecf6-42ce-8258-3102ab0d115d", "row_index": 186, "timestamp": "2018-10-19T00:42:07Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23bca201-ecf6-42ce-8258-3102ab0d115d", "eventTime": "2018-10-19T00:42:07Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efbcb43f-ac04-4a94-9784-494555b9b69a9", "record_id": "flaws_cloudtrail:0000187:efbcb43f-ac04-4a94-9784-494555b9b69a9", "row_index": 187, "timestamp": "2018-10-19T00:42:07Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efbcb43f-ac04-4a94-9784-494555b9b69a9", "eventTime": "2018-10-19T00:42:07Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63c7ef7a-f5e5-4701-b43d-5dfde862a14d", "record_id": "flaws_cloudtrail:0000188:63c7ef7a-f5e5-4701-b43d-5dfde862a14d", "row_index": 188, "timestamp": "2018-10-19T00:42:07Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63c7ef7a-f5e5-4701-b43d-5dfde862a14d", "eventTime": "2018-10-19T00:42:07Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8d5da21-a5d0-4f11-a781-445e15b807bc", "record_id": "flaws_cloudtrail:0000189:a8d5da21-a5d0-4f11-a781-445e15b807bc", "row_index": 189, "timestamp": "2018-10-19T00:42:07Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8d5da21-a5d0-4f11-a781-445e15b807bc", "eventTime": "2018-10-19T00:42:07Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0cc96f3-4eaf-45ff-856b-27eb0177b738", "record_id": "flaws_cloudtrail:0000190:c0cc96f3-4eaf-45ff-856b-27eb0177b738", "row_index": 190, "timestamp": "2018-10-19T00:42:07Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0cc96f3-4eaf-45ff-856b-27eb0177b738", "eventTime": "2018-10-19T00:42:07Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cc1224f-4a4f-4423-b901-f9f9e915925f", "record_id": "flaws_cloudtrail:0000191:2cc1224f-4a4f-4423-b901-f9f9e915925f", "row_index": 191, "timestamp": "2018-10-19T00:42:07Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cc1224f-4a4f-4423-b901-f9f9e915925f", "eventTime": "2018-10-19T00:42:07Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47747-6123-4cfb-92be-d5278fb66031", "record_id": "flaws_cloudtrail:0000192:47747-6123-4cfb-92be-d5278fb66031", "row_index": 192, "timestamp": "2018-10-19T00:42:07Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47747-6123-4cfb-92be-d5278fb66031", "eventTime": "2018-10-19T00:42:07Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7d1a41e-ab5f-4092-bf8b-3015879c3c3a", "record_id": "flaws_cloudtrail:0000193:d7d1a41e-ab5f-4092-bf8b-3015879c3c3a", "row_index": 193, "timestamp": "2018-10-19T00:42:07Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7d1a41e-ab5f-4092-bf8b-3015879c3c3a", "eventTime": "2018-10-19T00:42:07Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ef0d026-d0d8-4b5f-aaac-916bf97ac92f", "record_id": "flaws_cloudtrail:0000194:0ef0d026-d0d8-4b5f-aaac-916bf97ac92f", "row_index": 194, "timestamp": "2018-10-19T00:42:07Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ef0d026-d0d8-4b5f-aaac-916bf97ac92f", "eventTime": "2018-10-19T00:42:07Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e5c9a6f-6150-48d3-9171-c7c2210aa3a7", "record_id": "flaws_cloudtrail:0000195:0e5c9a6f-6150-48d3-9171-c7c2210aa3a7", "row_index": 195, "timestamp": "2018-10-19T00:42:07Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e5c9a6f-6150-48d3-9171-c7c2210aa3a7", "eventTime": "2018-10-19T00:42:07Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6198be90-23cd-4478-9dd0-c201ffca1b84", "record_id": "flaws_cloudtrail:0000196:6198be90-23cd-4478-9dd0-c201ffca1b84", "row_index": 196, "timestamp": "2018-10-19T00:42:07Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6198be90-23cd-4478-9dd0-c201ffca1b84", "eventTime": "2018-10-19T00:42:07Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aaa65ed9-b3f7-4c6c-bd83-a98409e0efc0", "record_id": "flaws_cloudtrail:0000197:aaa65ed9-b3f7-4c6c-bd83-a98409e0efc0", "row_index": 197, "timestamp": "2018-10-19T00:42:07Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aaa65ed9-b3f7-4c6c-bd83-a98409e0efc0", "eventTime": "2018-10-19T00:42:07Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aec666913-e51a-4b92-a54d-953d80d1fd16", "record_id": "flaws_cloudtrail:0000198:aec666913-e51a-4b92-a54d-953d80d1fd16", "row_index": 198, "timestamp": "2018-10-19T00:42:07Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aec666913-e51a-4b92-a54d-953d80d1fd16", "eventTime": "2018-10-19T00:42:07Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a7568e4-b715-42fe-8280-1aa6f85fe4f2", "record_id": "flaws_cloudtrail:0000199:0a7568e4-b715-42fe-8280-1aa6f85fe4f2", "row_index": 199, "timestamp": "2018-10-19T00:42:07Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a7568e4-b715-42fe-8280-1aa6f85fe4f2", "eventTime": "2018-10-19T00:42:07Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57f6c998-b6f9-4541-9bd5-6f94c7db6c34", "record_id": "flaws_cloudtrail:0000200:57f6c998-b6f9-4541-9bd5-6f94c7db6c34", "row_index": 200, "timestamp": "2018-10-19T00:42:07Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57f6c998-b6f9-4541-9bd5-6f94c7db6c34", "eventTime": "2018-10-19T00:42:07Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac5afc2c-81f9-4679-99a6-f729fcb2b6c7", "record_id": "flaws_cloudtrail:0000201:ac5afc2c-81f9-4679-99a6-f729fcb2b6c7", "row_index": 201, "timestamp": "2018-10-19T00:42:07Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac5afc2c-81f9-4679-99a6-f729fcb2b6c7", "eventTime": "2018-10-19T00:42:07Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a3de838-77f1-440f-802f-df12dfed996b", "record_id": "flaws_cloudtrail:0000202:0a3de838-77f1-440f-802f-df12dfed996b", "row_index": 202, "timestamp": "2018-10-19T00:42:07Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a3de838-77f1-440f-802f-df12dfed996b", "eventTime": "2018-10-19T00:42:07Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f93f80ff-32cb-42b5-b8f3-42533a1271", "record_id": "flaws_cloudtrail:0000203:f93f80ff-32cb-42b5-b8f3-42533a1271", "row_index": 203, "timestamp": "2018-10-19T00:42:07Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f93f80ff-32cb-42b5-b8f3-42533a1271", "eventTime": "2018-10-19T00:42:07Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b68eded-3254-4c7f-a426-ac041a0b0fe5", "record_id": "flaws_cloudtrail:0000204:5b68eded-3254-4c7f-a426-ac041a0b0fe5", "row_index": 204, "timestamp": "2018-10-19T00:42:08Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b68eded-3254-4c7f-a426-ac041a0b0fe5", "eventTime": "2018-10-19T00:42:08Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "697bec45-1dd3-4924-8653-448806a12", "record_id": "flaws_cloudtrail:0000205:697bec45-1dd3-4924-8653-448806a12", "row_index": 205, "timestamp": "2018-10-19T00:42:08Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "697bec45-1dd3-4924-8653-448806a12", "eventTime": "2018-10-19T00:42:08Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50aa38df-2415-4f7f-8682-e5a0d29fcaa1", "record_id": "flaws_cloudtrail:0000206:50aa38df-2415-4f7f-8682-e5a0d29fcaa1", "row_index": 206, "timestamp": "2018-10-19T00:42:08Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50aa38df-2415-4f7f-8682-e5a0d29fcaa1", "eventTime": "2018-10-19T00:42:08Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0eec2cff-fa38-4db2-a5b4-f504c852d87a", "record_id": "flaws_cloudtrail:0000207:0eec2cff-fa38-4db2-a5b4-f504c852d87a", "row_index": 207, "timestamp": "2018-10-19T00:42:08Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0eec2cff-fa38-4db2-a5b4-f504c852d87a", "eventTime": "2018-10-19T00:42:08Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca699ef4-36ec-4a63-af95-312f205a4c03", "record_id": "flaws_cloudtrail:0000208:ca699ef4-36ec-4a63-af95-312f205a4c03", "row_index": 208, "timestamp": "2018-10-19T00:42:08Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca699ef4-36ec-4a63-af95-312f205a4c03", "eventTime": "2018-10-19T00:42:08Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16de1916-772b-407d-be27-01d8d4d4f3af", "record_id": "flaws_cloudtrail:0000209:16de1916-772b-407d-be27-01d8d4d4f3af", "row_index": 209, "timestamp": "2018-10-19T00:42:08Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16de1916-772b-407d-be27-01d8d4d4f3af", "eventTime": "2018-10-19T00:42:08Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "925bdec3-093a-4367-950c-f4457cb6293e", "record_id": "flaws_cloudtrail:0000210:925bdec3-093a-4367-950c-f4457cb6293e", "row_index": 210, "timestamp": "2018-10-19T00:42:08Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "925bdec3-093a-4367-950c-f4457cb6293e", "eventTime": "2018-10-19T00:42:08Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16b59df1-1ebd-408b-ac52-d345451fc08", "record_id": "flaws_cloudtrail:0000211:16b59df1-1ebd-408b-ac52-d345451fc08", "row_index": 211, "timestamp": "2018-10-19T00:42:08Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16b59df1-1ebd-408b-ac52-d345451fc08", "eventTime": "2018-10-19T00:42:08Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "202f7bae-dce7-4311-b99e-50da2edb79a2", "record_id": "flaws_cloudtrail:0000212:202f7bae-dce7-4311-b99e-50da2edb79a2", "row_index": 212, "timestamp": "2018-10-19T00:42:09Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "202f7bae-dce7-4311-b99e-50da2edb79a2", "eventTime": "2018-10-19T00:42:09Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "683e0dc1-6e68-4eec-83dc-6bb7a9675daf", "record_id": "flaws_cloudtrail:0000213:683e0dc1-6e68-4eec-83dc-6bb7a9675daf", "row_index": 213, "timestamp": "2018-10-19T00:42:09Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "683e0dc1-6e68-4eec-83dc-6bb7a9675daf", "eventTime": "2018-10-19T00:42:09Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bb50a9d-ff39-48b7-9b02-5db44a2d2264", "record_id": "flaws_cloudtrail:0000214:6bb50a9d-ff39-48b7-9b02-5db44a2d2264", "row_index": 214, "timestamp": "2018-10-19T00:42:09Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bb50a9d-ff39-48b7-9b02-5db44a2d2264", "eventTime": "2018-10-19T00:42:09Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c9df602-751e-427f-bb21-a53cd436d7f7", "record_id": "flaws_cloudtrail:0000215:6c9df602-751e-427f-bb21-a53cd436d7f7", "row_index": 215, "timestamp": "2018-10-19T00:42:09Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c9df602-751e-427f-bb21-a53cd436d7f7", "eventTime": "2018-10-19T00:42:09Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b12be9e-e13b-4615-ae5a-4637a5d94e25", "record_id": "flaws_cloudtrail:0000216:6b12be9e-e13b-4615-ae5a-4637a5d94e25", "row_index": 216, "timestamp": "2018-10-19T00:42:09Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b12be9e-e13b-4615-ae5a-4637a5d94e25", "eventTime": "2018-10-19T00:42:09Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d202bba-47c4-4188-b17a-bdf8085f3050", "record_id": "flaws_cloudtrail:0000217:1d202bba-47c4-4188-b17a-bdf8085f3050", "row_index": 217, "timestamp": "2018-10-19T00:42:09Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d202bba-47c4-4188-b17a-bdf8085f3050", "eventTime": "2018-10-19T00:42:09Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "463632a7-ef6f-413e-9485-f23dcd8e8444", "record_id": "flaws_cloudtrail:0000218:463632a7-ef6f-413e-9485-f23dcd8e8444", "row_index": 218, "timestamp": "2018-10-19T00:42:09Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "463632a7-ef6f-413e-9485-f23dcd8e8444", "eventTime": "2018-10-19T00:42:09Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c58ad16-a3c3-47e6-85c0-fa71b8a079125", "record_id": "flaws_cloudtrail:0000219:7c58ad16-a3c3-47e6-85c0-fa71b8a079125", "row_index": 219, "timestamp": "2018-10-19T00:42:09Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c58ad16-a3c3-47e6-85c0-fa71b8a079125", "eventTime": "2018-10-19T00:42:09Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "232d8131-fdea-45d3-8908-284761d8f0371", "record_id": "flaws_cloudtrail:0000220:232d8131-fdea-45d3-8908-284761d8f0371", "row_index": 220, "timestamp": "2018-10-19T00:42:09Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "232d8131-fdea-45d3-8908-284761d8f0371", "eventTime": "2018-10-19T00:42:09Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a4a8071-88a7-4fc1-becb-83e575516ebe", "record_id": "flaws_cloudtrail:0000221:2a4a8071-88a7-4fc1-becb-83e575516ebe", "row_index": 221, "timestamp": "2018-10-19T00:42:12Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 653, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a4a8071-88a7-4fc1-becb-83e575516ebe", "eventTime": "2018-10-19T00:42:12Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1eb8ca9d-db7f-4dae-9bbe-fe255eab35dc", "record_id": "flaws_cloudtrail:0000222:1eb8ca9d-db7f-4dae-9bbe-fe255eab35dc", "row_index": 222, "timestamp": "2018-10-19T00:42:13Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1eb8ca9d-db7f-4dae-9bbe-fe255eab35dc", "eventTime": "2018-10-19T00:42:13Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbfad2d1-468a-4bd5-b536-2d37e53ed81b", "record_id": "flaws_cloudtrail:0000223:cbfad2d1-468a-4bd5-b536-2d37e53ed81b", "row_index": 223, "timestamp": "2018-10-19T00:42:13Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbfad2d1-468a-4bd5-b536-2d37e53ed81b", "eventTime": "2018-10-19T00:42:13Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27b01107-4405-4d9d-aabe-8f29982bfbd6", "record_id": "flaws_cloudtrail:0000224:27b01107-4405-4d9d-aabe-8f29982bfbd6", "row_index": 224, "timestamp": "2018-10-19T00:42:13Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27b01107-4405-4d9d-aabe-8f29982bfbd6", "eventTime": "2018-10-19T00:42:13Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc135d9d-bfd2-4131-a118-cba3e189b183", "record_id": "flaws_cloudtrail:0000225:dc135d9d-bfd2-4131-a118-cba3e189b183", "row_index": 225, "timestamp": "2018-10-19T00:42:13Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc135d9d-bfd2-4131-a118-cba3e189b183", "eventTime": "2018-10-19T00:42:13Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52a8ee3e-5803-4458-bf64-c10a817290c", "record_id": "flaws_cloudtrail:0000226:52a8ee3e-5803-4458-bf64-c10a817290c", "row_index": 226, "timestamp": "2018-10-19T00:42:13Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52a8ee3e-5803-4458-bf64-c10a817290c", "eventTime": "2018-10-19T00:42:13Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7816e36-872f-4c29-b45c-4a646830d48f", "record_id": "flaws_cloudtrail:0000227:c7816e36-872f-4c29-b45c-4a646830d48f", "row_index": 227, "timestamp": "2018-10-19T00:42:13Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7816e36-872f-4c29-b45c-4a646830d48f", "eventTime": "2018-10-19T00:42:13Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e17051e-167e-41df-93ba-e9542ec393fe", "record_id": "flaws_cloudtrail:0000228:e17051e-167e-41df-93ba-e9542ec393fe", "row_index": 228, "timestamp": "2018-10-19T00:42:13Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e17051e-167e-41df-93ba-e9542ec393fe", "eventTime": "2018-10-19T00:42:13Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f18d3e3e-6dad-4221-a0b0-e9be7310f9af", "record_id": "flaws_cloudtrail:0000229:f18d3e3e-6dad-4221-a0b0-e9be7310f9af", "row_index": 229, "timestamp": "2018-10-19T00:42:14Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f18d3e3e-6dad-4221-a0b0-e9be7310f9af", "eventTime": "2018-10-19T00:42:14Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ae69f43-5d91-4c2a-a070-70e32078", "record_id": "flaws_cloudtrail:0000230:2ae69f43-5d91-4c2a-a070-70e32078", "row_index": 230, "timestamp": "2018-10-19T00:42:14Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ae69f43-5d91-4c2a-a070-70e32078", "eventTime": "2018-10-19T00:42:14Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb74a06a-7bd6-43b5-b086-460078fc710c0", "record_id": "flaws_cloudtrail:0000231:fb74a06a-7bd6-43b5-b086-460078fc710c0", "row_index": 231, "timestamp": "2018-10-19T00:42:14Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb74a06a-7bd6-43b5-b086-460078fc710c0", "eventTime": "2018-10-19T00:42:14Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc1ba07f-d6af-483c-80fe-ba861d9d8aca", "record_id": "flaws_cloudtrail:0000232:cc1ba07f-d6af-483c-80fe-ba861d9d8aca", "row_index": 232, "timestamp": "2018-10-19T00:42:14Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc1ba07f-d6af-483c-80fe-ba861d9d8aca", "eventTime": "2018-10-19T00:42:14Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb1751f9-4991-41e6-b24f-3905876a1fbb", "record_id": "flaws_cloudtrail:0000233:cb1751f9-4991-41e6-b24f-3905876a1fbb", "row_index": 233, "timestamp": "2018-10-19T00:42:14Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb1751f9-4991-41e6-b24f-3905876a1fbb", "eventTime": "2018-10-19T00:42:14Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8100db8e-97f8-4713-9f55-3035f290e16a", "record_id": "flaws_cloudtrail:0000234:8100db8e-97f8-4713-9f55-3035f290e16a", "row_index": 234, "timestamp": "2018-10-19T00:42:14Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8100db8e-97f8-4713-9f55-3035f290e16a", "eventTime": "2018-10-19T00:42:14Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "334f0d0f-84bf-4a30-bb41-c636e11903e6", "record_id": "flaws_cloudtrail:0000235:334f0d0f-84bf-4a30-bb41-c636e11903e6", "row_index": 235, "timestamp": "2018-10-19T00:42:14Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "334f0d0f-84bf-4a30-bb41-c636e11903e6", "eventTime": "2018-10-19T00:42:14Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc30309-a519-4aa7-abe2-e39c25f22381", "record_id": "flaws_cloudtrail:0000236:bc30309-a519-4aa7-abe2-e39c25f22381", "row_index": 236, "timestamp": "2018-10-19T00:42:14Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc30309-a519-4aa7-abe2-e39c25f22381", "eventTime": "2018-10-19T00:42:14Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21e8001d-e9c2-4e3b-b478-ee15aef73a3f", "record_id": "flaws_cloudtrail:0000237:21e8001d-e9c2-4e3b-b478-ee15aef73a3f", "row_index": 237, "timestamp": "2018-10-19T00:42:14Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21e8001d-e9c2-4e3b-b478-ee15aef73a3f", "eventTime": "2018-10-19T00:42:14Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b1dc6f6-2b87-4aef-93c6-c01f58840fed", "record_id": "flaws_cloudtrail:0000238:1b1dc6f6-2b87-4aef-93c6-c01f58840fed", "row_index": 238, "timestamp": "2018-10-19T00:42:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b1dc6f6-2b87-4aef-93c6-c01f58840fed", "eventTime": "2018-10-19T00:42:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8462b87-d681-41c1-8bdb-5d5cc5a0938f", "record_id": "flaws_cloudtrail:0000239:e8462b87-d681-41c1-8bdb-5d5cc5a0938f", "row_index": 239, "timestamp": "2018-10-19T00:42:14Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8462b87-d681-41c1-8bdb-5d5cc5a0938f", "eventTime": "2018-10-19T00:42:14Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cd49a46-22df-4028-8d6f-389b4cc93157", "record_id": "flaws_cloudtrail:0000240:5cd49a46-22df-4028-8d6f-389b4cc93157", "row_index": 240, "timestamp": "2018-10-19T00:42:14Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cd49a46-22df-4028-8d6f-389b4cc93157", "eventTime": "2018-10-19T00:42:14Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d86b5f21-20ec-4c97-ac7f-3df95ec8d503", "record_id": "flaws_cloudtrail:0000241:d86b5f21-20ec-4c97-ac7f-3df95ec8d503", "row_index": 241, "timestamp": "2018-10-19T00:42:14Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d86b5f21-20ec-4c97-ac7f-3df95ec8d503", "eventTime": "2018-10-19T00:42:14Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c3b104b-4db2-47eb-b26b-56ccb718e129", "record_id": "flaws_cloudtrail:0000242:8c3b104b-4db2-47eb-b26b-56ccb718e129", "row_index": 242, "timestamp": "2018-10-19T00:42:14Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c3b104b-4db2-47eb-b26b-56ccb718e129", "eventTime": "2018-10-19T00:42:14Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2c49aa5-ef35-4423-985b-0293fc1f2804", "record_id": "flaws_cloudtrail:0000243:d2c49aa5-ef35-4423-985b-0293fc1f2804", "row_index": 243, "timestamp": "2018-10-19T00:42:14Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2c49aa5-ef35-4423-985b-0293fc1f2804", "eventTime": "2018-10-19T00:42:14Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e31124-e0dd-46f4-aa68-44c56312c2b6", "record_id": "flaws_cloudtrail:0000244:e31124-e0dd-46f4-aa68-44c56312c2b6", "row_index": 244, "timestamp": "2018-10-19T00:42:14Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e31124-e0dd-46f4-aa68-44c56312c2b6", "eventTime": "2018-10-19T00:42:14Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e7945fd-3620-42c5-83ac-257701505d5e", "record_id": "flaws_cloudtrail:0000245:3e7945fd-3620-42c5-83ac-257701505d5e", "row_index": 245, "timestamp": "2018-10-19T00:42:14Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e7945fd-3620-42c5-83ac-257701505d5e", "eventTime": "2018-10-19T00:42:14Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "101e8b8a-268f-4758-9b22-483670a26c12", "record_id": "flaws_cloudtrail:0000246:101e8b8a-268f-4758-9b22-483670a26c12", "row_index": 246, "timestamp": "2018-10-19T00:42:14Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "101e8b8a-268f-4758-9b22-483670a26c12", "eventTime": "2018-10-19T00:42:14Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2275cad2-dd2c-4eb2-841b-549da11223d6", "record_id": "flaws_cloudtrail:0000247:2275cad2-dd2c-4eb2-841b-549da11223d6", "row_index": 247, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2275cad2-dd2c-4eb2-841b-549da11223d6", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0a4b162-5ce1-4753-b315-edadda1546b6", "record_id": "flaws_cloudtrail:0000248:e0a4b162-5ce1-4753-b315-edadda1546b6", "row_index": 248, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0a4b162-5ce1-4753-b315-edadda1546b6", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67e28bbd-3feb-421b-861c-e5822b6d52b9", "record_id": "flaws_cloudtrail:0000249:67e28bbd-3feb-421b-861c-e5822b6d52b9", "row_index": 249, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67e28bbd-3feb-421b-861c-e5822b6d52b9", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "530c527b-473b-4e28-b003-569a88151a9", "record_id": "flaws_cloudtrail:0000250:530c527b-473b-4e28-b003-569a88151a9", "row_index": 250, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "530c527b-473b-4e28-b003-569a88151a9", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c143975b-3051-4766-87bc-6941358b1f77", "record_id": "flaws_cloudtrail:0000251:c143975b-3051-4766-87bc-6941358b1f77", "row_index": 251, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c143975b-3051-4766-87bc-6941358b1f77", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "083f0899-48e2-428a-87d2-56fb9e77feff", "record_id": "flaws_cloudtrail:0000252:083f0899-48e2-428a-87d2-56fb9e77feff", "row_index": 252, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "083f0899-48e2-428a-87d2-56fb9e77feff", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b077694f0-05ea-49f2-938b-febfcd443a96", "record_id": "flaws_cloudtrail:0000253:b077694f0-05ea-49f2-938b-febfcd443a96", "row_index": 253, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b077694f0-05ea-49f2-938b-febfcd443a96", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0430af12-1abd-4eb2-a385-391b32a92e9f", "record_id": "flaws_cloudtrail:0000254:0430af12-1abd-4eb2-a385-391b32a92e9f", "row_index": 254, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0430af12-1abd-4eb2-a385-391b32a92e9f", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e463635-64e4-41d3-9aae-2ed5bd10cb4d", "record_id": "flaws_cloudtrail:0000255:5e463635-64e4-41d3-9aae-2ed5bd10cb4d", "row_index": 255, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e463635-64e4-41d3-9aae-2ed5bd10cb4d", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9caf89f1-62fa-456e-9466-2780ee9445e5", "record_id": "flaws_cloudtrail:0000256:9caf89f1-62fa-456e-9466-2780ee9445e5", "row_index": 256, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9caf89f1-62fa-456e-9466-2780ee9445e5", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "322411a6-5c5c-4eda-9147-df7395d67411", "record_id": "flaws_cloudtrail:0000257:322411a6-5c5c-4eda-9147-df7395d67411", "row_index": 257, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "322411a6-5c5c-4eda-9147-df7395d67411", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b7a3d60-aec8-4e65-8809-1d6b64b5c620", "record_id": "flaws_cloudtrail:0000258:2b7a3d60-aec8-4e65-8809-1d6b64b5c620", "row_index": 258, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b7a3d60-aec8-4e65-8809-1d6b64b5c620", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db0b8702-08e0-4898-9df8-8251a1e20e42", "record_id": "flaws_cloudtrail:0000259:db0b8702-08e0-4898-9df8-8251a1e20e42", "row_index": 259, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db0b8702-08e0-4898-9df8-8251a1e20e42", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8dce346-4366-4003-ae7e-4883e9fef572", "record_id": "flaws_cloudtrail:0000260:b8dce346-4366-4003-ae7e-4883e9fef572", "row_index": 260, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8dce346-4366-4003-ae7e-4883e9fef572", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "583d2588-6875-4789-ae8a-c67cb72bf730", "record_id": "flaws_cloudtrail:0000261:583d2588-6875-4789-ae8a-c67cb72bf730", "row_index": 261, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "583d2588-6875-4789-ae8a-c67cb72bf730", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3e54661-06ec-49ce-ba9e-32cbfe757af3", "record_id": "flaws_cloudtrail:0000262:f3e54661-06ec-49ce-ba9e-32cbfe757af3", "row_index": 262, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3e54661-06ec-49ce-ba9e-32cbfe757af3", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cb8f621-6fec-4e00-bc34-133b1424cd2d", "record_id": "flaws_cloudtrail:0000263:2cb8f621-6fec-4e00-bc34-133b1424cd2d", "row_index": 263, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cb8f621-6fec-4e00-bc34-133b1424cd2d", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cd8fc44-166c-4891-9032-0d80b999709c2", "record_id": "flaws_cloudtrail:0000264:2cd8fc44-166c-4891-9032-0d80b999709c2", "row_index": 264, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cd8fc44-166c-4891-9032-0d80b999709c2", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1784e6a3-c369-4844-8cc9-2eaa533793f9f", "record_id": "flaws_cloudtrail:0000265:1784e6a3-c369-4844-8cc9-2eaa533793f9f", "row_index": 265, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1784e6a3-c369-4844-8cc9-2eaa533793f9f", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "errorCode": "NoSuchWebsiteConfiguration", "errorMessage": "The specified bucket does not have a website configuration", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fccc467-163f-446d-9b99-24b48d995ab6", "record_id": "flaws_cloudtrail:0000266:3fccc467-163f-446d-9b99-24b48d995ab6", "row_index": 266, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fccc467-163f-446d-9b99-24b48d995ab6", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e3ca2ac-da0f-4039-a704-7cf7149f3e46", "record_id": "flaws_cloudtrail:0000267:9e3ca2ac-da0f-4039-a704-7cf7149f3e46", "row_index": 267, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e3ca2ac-da0f-4039-a704-7cf7149f3e46", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b01846f-9d28-4619-be54-614f9892d9e2", "record_id": "flaws_cloudtrail:0000268:b01846f-9d28-4619-be54-614f9892d9e2", "row_index": 268, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b01846f-9d28-4619-be54-614f9892d9e2", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bac60d3-4b85-44b9-92dc-a1e7f25ac08f", "record_id": "flaws_cloudtrail:0000269:3bac60d3-4b85-44b9-92dc-a1e7f25ac08f", "row_index": 269, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bac60d3-4b85-44b9-92dc-a1e7f25ac08f", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50edd70c-84b7-4abf-9ba0-ad85c3eff4e8", "record_id": "flaws_cloudtrail:0000270:50edd70c-84b7-4abf-9ba0-ad85c3eff4e8", "row_index": 270, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50edd70c-84b7-4abf-9ba0-ad85c3eff4e8", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74674e0e-2c70-459d-a309-c18b3a29b904", "record_id": "flaws_cloudtrail:0000271:74674e0e-2c70-459d-a309-c18b3a29b904", "row_index": 271, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74674e0e-2c70-459d-a309-c18b3a29b904", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "errorCode": "NoSuchWebsiteConfiguration", "errorMessage": "The specified bucket does not have a website configuration", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c289525-5630-4ac2-af2a-debf8e126b61", "record_id": "flaws_cloudtrail:0000272:6c289525-5630-4ac2-af2a-debf8e126b61", "row_index": 272, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c289525-5630-4ac2-af2a-debf8e126b61", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "425ae94e-c341-45c5-aa19-f667b3553eea", "record_id": "flaws_cloudtrail:0000273:425ae94e-c341-45c5-aa19-f667b3553eea", "row_index": 273, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "425ae94e-c341-45c5-aa19-f667b3553eea", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27080a96-4a66-4957-9978-4bd7f7b31493", "record_id": "flaws_cloudtrail:0000274:27080a96-4a66-4957-9978-4bd7f7b31493", "row_index": 274, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27080a96-4a66-4957-9978-4bd7f7b31493", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07b7d660-daae-4eec-aaf1-89410fb274", "record_id": "flaws_cloudtrail:0000275:07b7d660-daae-4eec-aaf1-89410fb274", "row_index": 275, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07b7d660-daae-4eec-aaf1-89410fb274", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6ade427-6517-4cde-be89-168feaa0df7b", "record_id": "flaws_cloudtrail:0000276:b6ade427-6517-4cde-be89-168feaa0df7b", "row_index": 276, "timestamp": "2018-10-19T00:42:15Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6ade427-6517-4cde-be89-168feaa0df7b", "eventTime": "2018-10-19T00:42:15Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3283b5af-1034-4cc5-a74e-4d5d52cf2fbf", "record_id": "flaws_cloudtrail:0000277:3283b5af-1034-4cc5-a74e-4d5d52cf2fbf", "row_index": 277, "timestamp": "2018-10-19T00:42:16Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3283b5af-1034-4cc5-a74e-4d5d52cf2fbf", "eventTime": "2018-10-19T00:42:16Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9ba4aa6-cbda-46fb-95bd-502441ce248c", "record_id": "flaws_cloudtrail:0000278:f9ba4aa6-cbda-46fb-95bd-502441ce248c", "row_index": 278, "timestamp": "2018-10-19T00:42:16Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9ba4aa6-cbda-46fb-95bd-502441ce248c", "eventTime": "2018-10-19T00:42:16Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e78da22-c967-4a48-ab69-cdd634b41b10", "record_id": "flaws_cloudtrail:0000279:5e78da22-c967-4a48-ab69-cdd634b41b10", "row_index": 279, "timestamp": "2018-10-19T00:42:16Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e78da22-c967-4a48-ab69-cdd634b41b10", "eventTime": "2018-10-19T00:42:16Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "errorCode": "NoSuchBucketPolicy", "errorMessage": "The bucket policy does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee7d9b35-bbc2-4d73-9bb6-1af59bdf4288", "record_id": "flaws_cloudtrail:0000280:ee7d9b35-bbc2-4d73-9bb6-1af59bdf4288", "row_index": 280, "timestamp": "2018-10-19T00:42:16Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee7d9b35-bbc2-4d73-9bb6-1af59bdf4288", "eventTime": "2018-10-19T00:42:16Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4570c561-769c-43c9-8ba3-d645ee32a5ba", "record_id": "flaws_cloudtrail:0000281:4570c561-769c-43c9-8ba3-d645ee32a5ba", "row_index": 281, "timestamp": "2018-10-19T00:42:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4570c561-769c-43c9-8ba3-d645ee32a5ba", "eventTime": "2018-10-19T00:42:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "140e2924-2f67-4502-95f3-ee70c1c8e8b7", "record_id": "flaws_cloudtrail:0000282:140e2924-2f67-4502-95f3-ee70c1c8e8b7", "row_index": 282, "timestamp": "2018-10-19T00:42:19Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "140e2924-2f67-4502-95f3-ee70c1c8e8b7", "eventTime": "2018-10-19T00:42:19Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fc2abf5-2508-4cf6-9f39-b09c682ed774", "record_id": "flaws_cloudtrail:0000283:5fc2abf5-2508-4cf6-9f39-b09c682ed774", "row_index": 283, "timestamp": "2018-10-19T00:42:20Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fc2abf5-2508-4cf6-9f39-b09c682ed774", "eventTime": "2018-10-19T00:42:20Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97157e-e4be-4e40-ac78-67b27590ec7e", "record_id": "flaws_cloudtrail:0000284:97157e-e4be-4e40-ac78-67b27590ec7e", "row_index": 284, "timestamp": "2018-10-19T00:42:20Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97157e-e4be-4e40-ac78-67b27590ec7e", "eventTime": "2018-10-19T00:42:20Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f677c241-5e6c-4a9b-8f61-a37f2e14767", "record_id": "flaws_cloudtrail:0000285:f677c241-5e6c-4a9b-8f61-a37f2e14767", "row_index": 285, "timestamp": "2018-10-19T00:42:20Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f677c241-5e6c-4a9b-8f61-a37f2e14767", "eventTime": "2018-10-19T00:42:20Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "655118a90-e52d-4a98-9915-e238dfcea5f3", "record_id": "flaws_cloudtrail:0000286:655118a90-e52d-4a98-9915-e238dfcea5f3", "row_index": 286, "timestamp": "2018-10-19T00:42:20Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "655118a90-e52d-4a98-9915-e238dfcea5f3", "eventTime": "2018-10-19T00:42:20Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f7939c8-6213-4a49-bf63-d780e3bed6f5", "record_id": "flaws_cloudtrail:0000287:7f7939c8-6213-4a49-bf63-d780e3bed6f5", "row_index": 287, "timestamp": "2018-10-19T00:42:20Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f7939c8-6213-4a49-bf63-d780e3bed6f5", "eventTime": "2018-10-19T00:42:20Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "884b121e-3fde-448e-8657-503714a615", "record_id": "flaws_cloudtrail:0000288:884b121e-3fde-448e-8657-503714a615", "row_index": 288, "timestamp": "2018-10-19T00:42:20Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "884b121e-3fde-448e-8657-503714a615", "eventTime": "2018-10-19T00:42:20Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a42cb613-2b8a-42e0-915f-a6f4400fb4fc", "record_id": "flaws_cloudtrail:0000289:a42cb613-2b8a-42e0-915f-a6f4400fb4fc", "row_index": 289, "timestamp": "2018-10-19T00:42:20Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a42cb613-2b8a-42e0-915f-a6f4400fb4fc", "eventTime": "2018-10-19T00:42:20Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4e33534-a24b-4fbd-b99f-3d01c34009bc", "record_id": "flaws_cloudtrail:0000290:e4e33534-a24b-4fbd-b99f-3d01c34009bc", "row_index": 290, "timestamp": "2018-10-19T00:42:20Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4e33534-a24b-4fbd-b99f-3d01c34009bc", "eventTime": "2018-10-19T00:42:20Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "429546-7b71-41b3-ae98-884b93aae0c4", "record_id": "flaws_cloudtrail:0000291:429546-7b71-41b3-ae98-884b93aae0c4", "row_index": 291, "timestamp": "2018-10-19T00:42:20Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "429546-7b71-41b3-ae98-884b93aae0c4", "eventTime": "2018-10-19T00:42:20Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc8f5bde-a4fa-4daa-8f54-423d14ea47bf", "record_id": "flaws_cloudtrail:0000292:fc8f5bde-a4fa-4daa-8f54-423d14ea47bf", "row_index": 292, "timestamp": "2018-10-19T00:42:22Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc8f5bde-a4fa-4daa-8f54-423d14ea47bf", "eventTime": "2018-10-19T00:42:22Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a752855-470c-40eb-88dc-5cc8a9b7a515", "record_id": "flaws_cloudtrail:0000293:8a752855-470c-40eb-88dc-5cc8a9b7a515", "row_index": 293, "timestamp": "2018-10-19T00:42:22Z", "event_type": "GetStackPolicy", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a752855-470c-40eb-88dc-5cc8a9b7a515", "eventTime": "2018-10-19T00:42:22Z", "eventName": "GetStackPolicy", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"stackName": "Summit-Route-security-assessment-access"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08ef7b95-46a5-42a0-b8d9-75093b6ffe58", "record_id": "flaws_cloudtrail:0000294:08ef7b95-46a5-42a0-b8d9-75093b6ffe58", "row_index": 294, "timestamp": "2018-10-19T00:42:22Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08ef7b95-46a5-42a0-b8d9-75093b6ffe58", "eventTime": "2018-10-19T00:42:22Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "371e33a1-d358-463b-9fc9-a16549f9d4c7", "record_id": "flaws_cloudtrail:0000295:371e33a1-d358-463b-9fc9-a16549f9d4c7", "row_index": 295, "timestamp": "2018-10-19T00:42:22Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "371e33a1-d358-463b-9fc9-a16549f9d4c7", "eventTime": "2018-10-19T00:42:22Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f612f000-eb6f-42c9-9ba4-856d55d6c90a", "record_id": "flaws_cloudtrail:0000296:f612f000-eb6f-42c9-9ba4-856d55d6c90a", "row_index": 296, "timestamp": "2018-10-19T00:42:22Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f612f000-eb6f-42c9-9ba4-856d55d6c90a", "eventTime": "2018-10-19T00:42:22Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "635d9917-ecac-4a19-b15d-9f69cada97c6", "record_id": "flaws_cloudtrail:0000297:635d9917-ecac-4a19-b15d-9f69cada97c6", "row_index": 297, "timestamp": "2018-10-19T00:42:22Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "635d9917-ecac-4a19-b15d-9f69cada97c6", "eventTime": "2018-10-19T00:42:22Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe1216db-a55b-48c2-a860-84e3deae485a", "record_id": "flaws_cloudtrail:0000298:fe1216db-a55b-48c2-a860-84e3deae485a", "row_index": 298, "timestamp": "2018-10-19T00:42:31Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe1216db-a55b-48c2-a860-84e3deae485a", "eventTime": "2018-10-19T00:42:31Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec18bb3e-4f86-4983-a43c-944b27b7ea17", "record_id": "flaws_cloudtrail:0000299:ec18bb3e-4f86-4983-a43c-944b27b7ea17", "row_index": 299, "timestamp": "2018-10-19T00:42:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec18bb3e-4f86-4983-a43c-944b27b7ea17", "eventTime": "2018-10-19T00:42:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aaac172e-cc61-46b2-9213-b5ce2c4b7efb", "record_id": "flaws_cloudtrail:0000300:aaac172e-cc61-46b2-9213-b5ce2c4b7efb", "row_index": 300, "timestamp": "2018-10-19T00:42:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aaac172e-cc61-46b2-9213-b5ce2c4b7efb", "eventTime": "2018-10-19T00:42:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "357d8233-1cd0-4152-a476-250e12e7f992", "record_id": "flaws_cloudtrail:0000301:357d8233-1cd0-4152-a476-250e12e7f992", "row_index": 301, "timestamp": "2018-10-19T00:42:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "357d8233-1cd0-4152-a476-250e12e7f992", "eventTime": "2018-10-19T00:42:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6adfa74-4c02-4c6f-b074-f062087cd94d", "record_id": "flaws_cloudtrail:0000302:b6adfa74-4c02-4c6f-b074-f062087cd94d", "row_index": 302, "timestamp": "2018-10-19T00:42:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6adfa74-4c02-4c6f-b074-f062087cd94d", "eventTime": "2018-10-19T00:42:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "310357fe3-f9fa-451e-8cee-147f9b051410", "record_id": "flaws_cloudtrail:0000303:310357fe3-f9fa-451e-8cee-147f9b051410", "row_index": 303, "timestamp": "2018-10-19T00:42:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "310357fe3-f9fa-451e-8cee-147f9b051410", "eventTime": "2018-10-19T00:42:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad34762-26f4-4978-8289-9c736d0c409f", "record_id": "flaws_cloudtrail:0000304:ad34762-26f4-4978-8289-9c736d0c409f", "row_index": 304, "timestamp": "2018-10-19T00:42:37Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad34762-26f4-4978-8289-9c736d0c409f", "eventTime": "2018-10-19T00:42:37Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b80f6c8e-15d3-4992-9b09-3e8153e9ec15", "record_id": "flaws_cloudtrail:0000305:b80f6c8e-15d3-4992-9b09-3e8153e9ec15", "row_index": 305, "timestamp": "2018-10-19T00:42:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b80f6c8e-15d3-4992-9b09-3e8153e9ec15", "eventTime": "2018-10-19T00:42:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f911f87c-e3ba-4998-91db-878b61b40af6", "record_id": "flaws_cloudtrail:0000306:f911f87c-e3ba-4998-91db-878b61b40af6", "row_index": 306, "timestamp": "2018-10-19T00:42:37Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f911f87c-e3ba-4998-91db-878b61b40af6", "eventTime": "2018-10-19T00:42:37Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfd86c3a-5f8c-4136-9e56-4c5a04bb1d35", "record_id": "flaws_cloudtrail:0000307:bfd86c3a-5f8c-4136-9e56-4c5a04bb1d35", "row_index": 307, "timestamp": "2018-10-19T00:42:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfd86c3a-5f8c-4136-9e56-4c5a04bb1d35", "eventTime": "2018-10-19T00:42:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bc93ffd-61d1-45e2-92b5-445a32437d2d", "record_id": "flaws_cloudtrail:0000308:0bc93ffd-61d1-45e2-92b5-445a32437d2d", "row_index": 308, "timestamp": "2018-10-19T00:42:37Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bc93ffd-61d1-45e2-92b5-445a32437d2d", "eventTime": "2018-10-19T00:42:37Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48030e61-0280-4c45-85cb-a9897b2c6491", "record_id": "flaws_cloudtrail:0000309:48030e61-0280-4c45-85cb-a9897b2c6491", "row_index": 309, "timestamp": "2018-10-19T00:42:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48030e61-0280-4c45-85cb-a9897b2c6491", "eventTime": "2018-10-19T00:42:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fe25e89-0561-427d-8f5e-90ec13dff3a6", "record_id": "flaws_cloudtrail:0000310:4fe25e89-0561-427d-8f5e-90ec13dff3a6", "row_index": 310, "timestamp": "2018-10-19T00:42:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fe25e89-0561-427d-8f5e-90ec13dff3a6", "eventTime": "2018-10-19T00:42:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12ade4c9-8f81-4c99-8249-fa776817fe8", "record_id": "flaws_cloudtrail:0000311:12ade4c9-8f81-4c99-8249-fa776817fe8", "row_index": 311, "timestamp": "2018-10-19T00:42:37Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12ade4c9-8f81-4c99-8249-fa776817fe8", "eventTime": "2018-10-19T00:42:37Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d86ee373-04c9-4feb-8784-f2b5c342621de", "record_id": "flaws_cloudtrail:0000312:d86ee373-04c9-4feb-8784-f2b5c342621de", "row_index": 312, "timestamp": "2018-10-19T00:42:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d86ee373-04c9-4feb-8784-f2b5c342621de", "eventTime": "2018-10-19T00:42:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "801d795b-aed5-460a-a176-6300c869a166", "record_id": "flaws_cloudtrail:0000313:801d795b-aed5-460a-a176-6300c869a166", "row_index": 313, "timestamp": "2018-10-19T00:42:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "801d795b-aed5-460a-a176-6300c869a166", "eventTime": "2018-10-19T00:42:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8599a4b5-31bd-41fb-8ecf-dc18f5a3107e", "record_id": "flaws_cloudtrail:0000314:8599a4b5-31bd-41fb-8ecf-dc18f5a3107e", "row_index": 314, "timestamp": "2018-10-19T00:42:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8599a4b5-31bd-41fb-8ecf-dc18f5a3107e", "eventTime": "2018-10-19T00:42:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68ac6041-e813-443c-84bd-51586fce70c5", "record_id": "flaws_cloudtrail:0000315:68ac6041-e813-443c-84bd-51586fce70c5", "row_index": 315, "timestamp": "2018-10-19T00:42:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68ac6041-e813-443c-84bd-51586fce70c5", "eventTime": "2018-10-19T00:42:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fce1631-90a7-4114-9ab3-e93c36df993f", "record_id": "flaws_cloudtrail:0000316:9fce1631-90a7-4114-9ab3-e93c36df993f", "row_index": 316, "timestamp": "2018-10-19T00:42:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fce1631-90a7-4114-9ab3-e93c36df993f", "eventTime": "2018-10-19T00:42:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3ea1fd9-f780-4ba0-9e48-55e44be59123", "record_id": "flaws_cloudtrail:0000317:c3ea1fd9-f780-4ba0-9e48-55e44be59123", "row_index": 317, "timestamp": "2018-10-19T00:42:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3ea1fd9-f780-4ba0-9e48-55e44be59123", "eventTime": "2018-10-19T00:42:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c047d20-8970-4f7e-a5c0-fba9046c4f9d", "record_id": "flaws_cloudtrail:0000318:4c047d20-8970-4f7e-a5c0-fba9046c4f9d", "row_index": 318, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c047d20-8970-4f7e-a5c0-fba9046c4f9d", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0c081bd-5c9f-4112-b719-ef6074e24d50", "record_id": "flaws_cloudtrail:0000319:a0c081bd-5c9f-4112-b719-ef6074e24d50", "row_index": 319, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0c081bd-5c9f-4112-b719-ef6074e24d50", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb76ac47-2229-4575-88a7-6da1d192635b0", "record_id": "flaws_cloudtrail:0000320:cb76ac47-2229-4575-88a7-6da1d192635b0", "row_index": 320, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb76ac47-2229-4575-88a7-6da1d192635b0", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17f702cd-85b4-4335-89cf-03227f1aba05", "record_id": "flaws_cloudtrail:0000321:17f702cd-85b4-4335-89cf-03227f1aba05", "row_index": 321, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17f702cd-85b4-4335-89cf-03227f1aba05", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c89149-84f8-4957-a8e8-3af46072e5", "record_id": "flaws_cloudtrail:0000322:c89149-84f8-4957-a8e8-3af46072e5", "row_index": 322, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c89149-84f8-4957-a8e8-3af46072e5", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "383c4cf7-98fe-4c48-8ff3-624cb19657c8", "record_id": "flaws_cloudtrail:0000323:383c4cf7-98fe-4c48-8ff3-624cb19657c8", "row_index": 323, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "383c4cf7-98fe-4c48-8ff3-624cb19657c8", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a382fd4a-841c-4b8a-afa4-424b7c26360d", "record_id": "flaws_cloudtrail:0000324:a382fd4a-841c-4b8a-afa4-424b7c26360d", "row_index": 324, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a382fd4a-841c-4b8a-afa4-424b7c26360d", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b437db4b-e0e7-44c3-8dc9-13d16c0157fd", "record_id": "flaws_cloudtrail:0000325:b437db4b-e0e7-44c3-8dc9-13d16c0157fd", "row_index": 325, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b437db4b-e0e7-44c3-8dc9-13d16c0157fd", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c8e18ee-18b2-4462-956d-cdc440b6b9bc", "record_id": "flaws_cloudtrail:0000326:4c8e18ee-18b2-4462-956d-cdc440b6b9bc", "row_index": 326, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c8e18ee-18b2-4462-956d-cdc440b6b9bc", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "825f7c34-7532-48c0-842f-6b55a407b007", "record_id": "flaws_cloudtrail:0000327:825f7c34-7532-48c0-842f-6b55a407b007", "row_index": 327, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "825f7c34-7532-48c0-842f-6b55a407b007", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9bfda62-2f72-4c96-b468-433b6ecbf9cc", "record_id": "flaws_cloudtrail:0000328:f9bfda62-2f72-4c96-b468-433b6ecbf9cc", "row_index": 328, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9bfda62-2f72-4c96-b468-433b6ecbf9cc", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "886ea56f-238e-435b-85a5-f384c30d8117", "record_id": "flaws_cloudtrail:0000329:886ea56f-238e-435b-85a5-f384c30d8117", "row_index": 329, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "886ea56f-238e-435b-85a5-f384c30d8117", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59faae45-67e0-4cb8-9865-13ca21694", "record_id": "flaws_cloudtrail:0000330:59faae45-67e0-4cb8-9865-13ca21694", "row_index": 330, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59faae45-67e0-4cb8-9865-13ca21694", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40c50c4d-0d71-4e8e-a192-cc949ad952051", "record_id": "flaws_cloudtrail:0000331:40c50c4d-0d71-4e8e-a192-cc949ad952051", "row_index": 331, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40c50c4d-0d71-4e8e-a192-cc949ad952051", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4f65ac3-a063-470a-99c8-5e39cc9d9e51", "record_id": "flaws_cloudtrail:0000332:b4f65ac3-a063-470a-99c8-5e39cc9d9e51", "row_index": 332, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4f65ac3-a063-470a-99c8-5e39cc9d9e51", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "730ea84b-915f-4831-b1bf-82f2d40ba1c6", "record_id": "flaws_cloudtrail:0000333:730ea84b-915f-4831-b1bf-82f2d40ba1c6", "row_index": 333, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "730ea84b-915f-4831-b1bf-82f2d40ba1c6", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "959829c9-0150-45a0-92ff-8aece910fd33", "record_id": "flaws_cloudtrail:0000334:959829c9-0150-45a0-92ff-8aece910fd33", "row_index": 334, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "959829c9-0150-45a0-92ff-8aece910fd33", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4d148c0-c903-4bba-bd7d-45c6c328e7e3", "record_id": "flaws_cloudtrail:0000335:f4d148c0-c903-4bba-bd7d-45c6c328e7e3", "row_index": 335, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4d148c0-c903-4bba-bd7d-45c6c328e7e3", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6f45649-2323-4570-bd97-15e784f18a04", "record_id": "flaws_cloudtrail:0000336:f6f45649-2323-4570-bd97-15e784f18a04", "row_index": 336, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6f45649-2323-4570-bd97-15e784f18a04", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecbd2fe9-8192-4b09-8655-339a3748edce", "record_id": "flaws_cloudtrail:0000337:ecbd2fe9-8192-4b09-8655-339a3748edce", "row_index": 337, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecbd2fe9-8192-4b09-8655-339a3748edce", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20e38a12-1ffc-4b64-8e12-821c21ec0a84", "record_id": "flaws_cloudtrail:0000338:20e38a12-1ffc-4b64-8e12-821c21ec0a84", "row_index": 338, "timestamp": "2018-10-19T00:42:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20e38a12-1ffc-4b64-8e12-821c21ec0a84", "eventTime": "2018-10-19T00:42:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eee4e30e-c9d3-4e40-a587-2ca3b71e2f67", "record_id": "flaws_cloudtrail:0000339:eee4e30e-c9d3-4e40-a587-2ca3b71e2f67", "row_index": 339, "timestamp": "2018-10-19T00:42:39Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eee4e30e-c9d3-4e40-a587-2ca3b71e2f67", "eventTime": "2018-10-19T00:42:39Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bed6788-1cd3-4061-96d7-29082c1e5cb", "record_id": "flaws_cloudtrail:0000340:7bed6788-1cd3-4061-96d7-29082c1e5cb", "row_index": 340, "timestamp": "2018-10-19T00:42:39Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bed6788-1cd3-4061-96d7-29082c1e5cb", "eventTime": "2018-10-19T00:42:39Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5099c837-c56c-47b3-b99c-211df7880e4f", "record_id": "flaws_cloudtrail:0000341:5099c837-c56c-47b3-b99c-211df7880e4f", "row_index": 341, "timestamp": "2018-10-19T00:42:39Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5099c837-c56c-47b3-b99c-211df7880e4f", "eventTime": "2018-10-19T00:42:39Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "205d1b3c-43d9-4978-b81f-c4f28f33f795", "record_id": "flaws_cloudtrail:0000342:205d1b3c-43d9-4978-b81f-c4f28f33f795", "row_index": 342, "timestamp": "2018-10-19T00:42:39Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "205d1b3c-43d9-4978-b81f-c4f28f33f795", "eventTime": "2018-10-19T00:42:39Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9102a00-9288-4ffa-bbcd-77fc705d29f3", "record_id": "flaws_cloudtrail:0000343:a9102a00-9288-4ffa-bbcd-77fc705d29f3", "row_index": 343, "timestamp": "2018-10-19T00:42:39Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9102a00-9288-4ffa-bbcd-77fc705d29f3", "eventTime": "2018-10-19T00:42:39Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "778f1b5c-3c2d-4b00-816a-178cb76bcf84", "record_id": "flaws_cloudtrail:0000344:778f1b5c-3c2d-4b00-816a-178cb76bcf84", "row_index": 344, "timestamp": "2018-10-19T00:42:39Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "778f1b5c-3c2d-4b00-816a-178cb76bcf84", "eventTime": "2018-10-19T00:42:39Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6f1b9e6-4564-4a5f-8645-996951314603", "record_id": "flaws_cloudtrail:0000345:b6f1b9e6-4564-4a5f-8645-996951314603", "row_index": 345, "timestamp": "2018-10-19T00:42:39Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6f1b9e6-4564-4a5f-8645-996951314603", "eventTime": "2018-10-19T00:42:39Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db6d6e6f-a30a-4501-ab9a-2c3b44554b5f", "record_id": "flaws_cloudtrail:0000346:db6d6e6f-a30a-4501-ab9a-2c3b44554b5f", "row_index": 346, "timestamp": "2018-10-19T00:42:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db6d6e6f-a30a-4501-ab9a-2c3b44554b5f", "eventTime": "2018-10-19T00:42:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d16b54ca-4b99-43a9-a851-6952a4951db1", "record_id": "flaws_cloudtrail:0000347:d16b54ca-4b99-43a9-a851-6952a4951db1", "row_index": 347, "timestamp": "2018-10-19T00:42:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d16b54ca-4b99-43a9-a851-6952a4951db1", "eventTime": "2018-10-19T00:42:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e29cc489-d40c-46ba-84a1-e1bf27617", "record_id": "flaws_cloudtrail:0000348:e29cc489-d40c-46ba-84a1-e1bf27617", "row_index": 348, "timestamp": "2018-10-19T00:42:40Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e29cc489-d40c-46ba-84a1-e1bf27617", "eventTime": "2018-10-19T00:42:40Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e386c466-ed5f-4f8a-bf16-f78390c77fd", "record_id": "flaws_cloudtrail:0000349:e386c466-ed5f-4f8a-bf16-f78390c77fd", "row_index": 349, "timestamp": "2018-10-19T00:42:40Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e386c466-ed5f-4f8a-bf16-f78390c77fd", "eventTime": "2018-10-19T00:42:40Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a455dd2e-c434-4fe0-98a4-5b967ed7118c", "record_id": "flaws_cloudtrail:0000350:a455dd2e-c434-4fe0-98a4-5b967ed7118c", "row_index": 350, "timestamp": "2018-10-19T00:42:40Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a455dd2e-c434-4fe0-98a4-5b967ed7118c", "eventTime": "2018-10-19T00:42:40Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45165a3-18a6-4757-9cc1-7d38464f", "record_id": "flaws_cloudtrail:0000351:45165a3-18a6-4757-9cc1-7d38464f", "row_index": 351, "timestamp": "2018-10-19T00:42:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45165a3-18a6-4757-9cc1-7d38464f", "eventTime": "2018-10-19T00:42:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54d9ca5b-b72b-4c04-8481-37e99199b9a4", "record_id": "flaws_cloudtrail:0000352:54d9ca5b-b72b-4c04-8481-37e99199b9a4", "row_index": 352, "timestamp": "2018-10-19T00:42:40Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54d9ca5b-b72b-4c04-8481-37e99199b9a4", "eventTime": "2018-10-19T00:42:40Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0c74444-ba65-4806-b8c4-c5ea13154", "record_id": "flaws_cloudtrail:0000353:a0c74444-ba65-4806-b8c4-c5ea13154", "row_index": 353, "timestamp": "2018-10-19T00:42:40Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0c74444-ba65-4806-b8c4-c5ea13154", "eventTime": "2018-10-19T00:42:40Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8b966573-cc15-4822-8c1d-4a3c688300d6", "record_id": "flaws_cloudtrail:0000354:d8b966573-cc15-4822-8c1d-4a3c688300d6", "row_index": 354, "timestamp": "2018-10-19T00:42:40Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8b966573-cc15-4822-8c1d-4a3c688300d6", "eventTime": "2018-10-19T00:42:40Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff97af24-3284-4ef8-931c-656c2d697f37", "record_id": "flaws_cloudtrail:0000355:ff97af24-3284-4ef8-931c-656c2d697f37", "row_index": 355, "timestamp": "2018-10-19T00:42:40Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff97af24-3284-4ef8-931c-656c2d697f37", "eventTime": "2018-10-19T00:42:40Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c61422a-0321-4483-8206-2b558434c04fe", "record_id": "flaws_cloudtrail:0000356:9c61422a-0321-4483-8206-2b558434c04fe", "row_index": 356, "timestamp": "2018-10-19T00:42:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c61422a-0321-4483-8206-2b558434c04fe", "eventTime": "2018-10-19T00:42:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9669d87-25da-4ea6-a2a9-587edafa9fcc", "record_id": "flaws_cloudtrail:0000357:c9669d87-25da-4ea6-a2a9-587edafa9fcc", "row_index": 357, "timestamp": "2018-10-19T00:42:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9669d87-25da-4ea6-a2a9-587edafa9fcc", "eventTime": "2018-10-19T00:42:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aae6a41e-b7a8-42aa-ba03-d7a5109c400e", "record_id": "flaws_cloudtrail:0000358:aae6a41e-b7a8-42aa-ba03-d7a5109c400e", "row_index": 358, "timestamp": "2018-10-19T00:42:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aae6a41e-b7a8-42aa-ba03-d7a5109c400e", "eventTime": "2018-10-19T00:42:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8c5d0c4-b3c8-47a9-a0d3-3a1428a6bf4d", "record_id": "flaws_cloudtrail:0000359:b8c5d0c4-b3c8-47a9-a0d3-3a1428a6bf4d", "row_index": 359, "timestamp": "2018-10-19T00:42:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8c5d0c4-b3c8-47a9-a0d3-3a1428a6bf4d", "eventTime": "2018-10-19T00:42:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c50099b-f0fa-44b8-96d9-5cbb304dabe2", "record_id": "flaws_cloudtrail:0000360:c50099b-f0fa-44b8-96d9-5cbb304dabe2", "row_index": 360, "timestamp": "2018-10-19T00:42:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c50099b-f0fa-44b8-96d9-5cbb304dabe2", "eventTime": "2018-10-19T00:42:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af65b21f-cb58-4130-86b9-1c6b7559aee7", "record_id": "flaws_cloudtrail:0000361:af65b21f-cb58-4130-86b9-1c6b7559aee7", "row_index": 361, "timestamp": "2018-10-19T00:42:41Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af65b21f-cb58-4130-86b9-1c6b7559aee7", "eventTime": "2018-10-19T00:42:41Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bb520655-f2e7-482e-abc3-bf15c68d240d", "record_id": "flaws_cloudtrail:0000362:7bb520655-f2e7-482e-abc3-bf15c68d240d", "row_index": 362, "timestamp": "2018-10-19T00:42:41Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bb520655-f2e7-482e-abc3-bf15c68d240d", "eventTime": "2018-10-19T00:42:41Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "010c9feb-482b-4372-8937-3c63cb9554b1", "record_id": "flaws_cloudtrail:0000363:010c9feb-482b-4372-8937-3c63cb9554b1", "row_index": 363, "timestamp": "2018-10-19T00:42:41Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "010c9feb-482b-4372-8937-3c63cb9554b1", "eventTime": "2018-10-19T00:42:41Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e26175-ee1f-4c75-9699-cc78c6c022203", "record_id": "flaws_cloudtrail:0000364:e26175-ee1f-4c75-9699-cc78c6c022203", "row_index": 364, "timestamp": "2018-10-19T00:42:41Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e26175-ee1f-4c75-9699-cc78c6c022203", "eventTime": "2018-10-19T00:42:41Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "253f74d8-f169-46ed-8c38-8c8cbea7e580", "record_id": "flaws_cloudtrail:0000365:253f74d8-f169-46ed-8c38-8c8cbea7e580", "row_index": 365, "timestamp": "2018-10-19T00:42:41Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "253f74d8-f169-46ed-8c38-8c8cbea7e580", "eventTime": "2018-10-19T00:42:41Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c11a06c-d852-493d-92a9-3ccf9b1acd81", "record_id": "flaws_cloudtrail:0000366:4c11a06c-d852-493d-92a9-3ccf9b1acd81", "row_index": 366, "timestamp": "2018-10-19T00:42:41Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c11a06c-d852-493d-92a9-3ccf9b1acd81", "eventTime": "2018-10-19T00:42:41Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f891872-3eb4-4349-8b84-eae3f382851", "record_id": "flaws_cloudtrail:0000367:3f891872-3eb4-4349-8b84-eae3f382851", "row_index": 367, "timestamp": "2018-10-19T00:42:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f891872-3eb4-4349-8b84-eae3f382851", "eventTime": "2018-10-19T00:42:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe2c769b-f91c-479b-b3d9-48d9b8e7c815", "record_id": "flaws_cloudtrail:0000368:fe2c769b-f91c-479b-b3d9-48d9b8e7c815", "row_index": 368, "timestamp": "2018-10-19T00:42:41Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe2c769b-f91c-479b-b3d9-48d9b8e7c815", "eventTime": "2018-10-19T00:42:41Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ff005494-4634-4c9b-b310-56c080d5e4c0", "record_id": "flaws_cloudtrail:0000369:3ff005494-4634-4c9b-b310-56c080d5e4c0", "row_index": 369, "timestamp": "2018-10-19T00:42:41Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ff005494-4634-4c9b-b310-56c080d5e4c0", "eventTime": "2018-10-19T00:42:41Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9c9ed35-6f65-4891-bf2a-bc1ef89592d9", "record_id": "flaws_cloudtrail:0000370:d9c9ed35-6f65-4891-bf2a-bc1ef89592d9", "row_index": 370, "timestamp": "2018-10-19T00:42:41Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9c9ed35-6f65-4891-bf2a-bc1ef89592d9", "eventTime": "2018-10-19T00:42:41Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa122271d-587e-4040-96ea-b57aa893ffff", "record_id": "flaws_cloudtrail:0000371:fa122271d-587e-4040-96ea-b57aa893ffff", "row_index": 371, "timestamp": "2018-10-19T00:42:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa122271d-587e-4040-96ea-b57aa893ffff", "eventTime": "2018-10-19T00:42:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7fafd3b-426c-411f-bb5c-fac3cab87053", "record_id": "flaws_cloudtrail:0000372:b7fafd3b-426c-411f-bb5c-fac3cab87053", "row_index": 372, "timestamp": "2018-10-19T00:42:41Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7fafd3b-426c-411f-bb5c-fac3cab87053", "eventTime": "2018-10-19T00:42:41Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e8dd3bd-76f4-4f75-9987-b5d43f8772fb", "record_id": "flaws_cloudtrail:0000373:0e8dd3bd-76f4-4f75-9987-b5d43f8772fb", "row_index": 373, "timestamp": "2018-10-19T00:42:42Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e8dd3bd-76f4-4f75-9987-b5d43f8772fb", "eventTime": "2018-10-19T00:42:42Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63993-b3b2-438a-9fd5-c494c5ab22a6", "record_id": "flaws_cloudtrail:0000374:63993-b3b2-438a-9fd5-c494c5ab22a6", "row_index": 374, "timestamp": "2018-10-19T00:42:42Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63993-b3b2-438a-9fd5-c494c5ab22a6", "eventTime": "2018-10-19T00:42:42Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69cf24e0-0e4b-46ce-a09e-c19e359915ae", "record_id": "flaws_cloudtrail:0000375:69cf24e0-0e4b-46ce-a09e-c19e359915ae", "row_index": 375, "timestamp": "2018-10-19T00:42:45Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69cf24e0-0e4b-46ce-a09e-c19e359915ae", "eventTime": "2018-10-19T00:42:45Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cca4122c-9abb-4f80-826d-67ce1f028a3f", "record_id": "flaws_cloudtrail:0000376:cca4122c-9abb-4f80-826d-67ce1f028a3f", "row_index": 376, "timestamp": "2018-10-19T00:42:45Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cca4122c-9abb-4f80-826d-67ce1f028a3f", "eventTime": "2018-10-19T00:42:45Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "044d296b-36d5-48c9-9ef0-1a9b462049", "record_id": "flaws_cloudtrail:0000377:044d296b-36d5-48c9-9ef0-1a9b462049", "row_index": 377, "timestamp": "2018-10-19T00:42:45Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "044d296b-36d5-48c9-9ef0-1a9b462049", "eventTime": "2018-10-19T00:42:45Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "972cb68f-56dd-48f4-9deb-292825608774", "record_id": "flaws_cloudtrail:0000378:972cb68f-56dd-48f4-9deb-292825608774", "row_index": 378, "timestamp": "2018-10-19T00:42:45Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "972cb68f-56dd-48f4-9deb-292825608774", "eventTime": "2018-10-19T00:42:45Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12acf395-aec1-4d4c-92bb-21f723becda8", "record_id": "flaws_cloudtrail:0000379:12acf395-aec1-4d4c-92bb-21f723becda8", "row_index": 379, "timestamp": "2018-10-19T00:42:45Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12acf395-aec1-4d4c-92bb-21f723becda8", "eventTime": "2018-10-19T00:42:45Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aead9ab0-f385-4274-94b4-0f36d45a7ddb", "record_id": "flaws_cloudtrail:0000380:aead9ab0-f385-4274-94b4-0f36d45a7ddb", "row_index": 380, "timestamp": "2018-10-19T00:42:45Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aead9ab0-f385-4274-94b4-0f36d45a7ddb", "eventTime": "2018-10-19T00:42:45Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e16a434-33a5-459d-a234-8d3fa45e050a", "record_id": "flaws_cloudtrail:0000381:4e16a434-33a5-459d-a234-8d3fa45e050a", "row_index": 381, "timestamp": "2018-10-19T00:42:45Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e16a434-33a5-459d-a234-8d3fa45e050a", "eventTime": "2018-10-19T00:42:45Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cec2ad5-cd41-446e-8650-089ba9f3c823", "record_id": "flaws_cloudtrail:0000382:0cec2ad5-cd41-446e-8650-089ba9f3c823", "row_index": 382, "timestamp": "2018-10-19T00:42:45Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cec2ad5-cd41-446e-8650-089ba9f3c823", "eventTime": "2018-10-19T00:42:45Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecfe39c8-b802-4917-a159-c29163b42c30", "record_id": "flaws_cloudtrail:0000383:ecfe39c8-b802-4917-a159-c29163b42c30", "row_index": 383, "timestamp": "2018-10-19T00:42:45Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecfe39c8-b802-4917-a159-c29163b42c30", "eventTime": "2018-10-19T00:42:45Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d01b78a8-c04b-40e3-bccb-cb27ba8ec8a6", "record_id": "flaws_cloudtrail:0000384:d01b78a8-c04b-40e3-bccb-cb27ba8ec8a6", "row_index": 384, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d01b78a8-c04b-40e3-bccb-cb27ba8ec8a6", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc1b54c9-c5a7-4845-bb5a-349c9cbbc41c", "record_id": "flaws_cloudtrail:0000385:fc1b54c9-c5a7-4845-bb5a-349c9cbbc41c", "row_index": 385, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc1b54c9-c5a7-4845-bb5a-349c9cbbc41c", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12c067ff-3d27-45de-a9cb-a4d174805119", "record_id": "flaws_cloudtrail:0000386:12c067ff-3d27-45de-a9cb-a4d174805119", "row_index": 386, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12c067ff-3d27-45de-a9cb-a4d174805119", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77dcb77a-a784-4c2d-8c6a-d407a81ca2ca", "record_id": "flaws_cloudtrail:0000387:77dcb77a-a784-4c2d-8c6a-d407a81ca2ca", "row_index": 387, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77dcb77a-a784-4c2d-8c6a-d407a81ca2ca", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dc5ae5e-d27d-4313-a884-81c6d601d160", "record_id": "flaws_cloudtrail:0000388:0dc5ae5e-d27d-4313-a884-81c6d601d160", "row_index": 388, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dc5ae5e-d27d-4313-a884-81c6d601d160", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c92000c-500e-4a36-9b06-7f36b78f9303", "record_id": "flaws_cloudtrail:0000389:c92000c-500e-4a36-9b06-7f36b78f9303", "row_index": 389, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c92000c-500e-4a36-9b06-7f36b78f9303", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0b449c4-6f84-442d-b1df-5e489b8b1c25", "record_id": "flaws_cloudtrail:0000390:e0b449c4-6f84-442d-b1df-5e489b8b1c25", "row_index": 390, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0b449c4-6f84-442d-b1df-5e489b8b1c25", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "feffbd94-976c-4bc2-a904-5029f5da4218", "record_id": "flaws_cloudtrail:0000391:feffbd94-976c-4bc2-a904-5029f5da4218", "row_index": 391, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "feffbd94-976c-4bc2-a904-5029f5da4218", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58253aac-fded-4a50-8a4f-a9fdb34deda0", "record_id": "flaws_cloudtrail:0000392:58253aac-fded-4a50-8a4f-a9fdb34deda0", "row_index": 392, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58253aac-fded-4a50-8a4f-a9fdb34deda0", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c27791-36bd-4908-8f09-ce1c899976e28", "record_id": "flaws_cloudtrail:0000393:7c27791-36bd-4908-8f09-ce1c899976e28", "row_index": 393, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c27791-36bd-4908-8f09-ce1c899976e28", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d540cee-a397-4a1f-bcc0-7c1ba8a591ef", "record_id": "flaws_cloudtrail:0000394:1d540cee-a397-4a1f-bcc0-7c1ba8a591ef", "row_index": 394, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d540cee-a397-4a1f-bcc0-7c1ba8a591ef", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bffe3f7-5ac3-4f91-9f9a-b90100fc9529", "record_id": "flaws_cloudtrail:0000395:7bffe3f7-5ac3-4f91-9f9a-b90100fc9529", "row_index": 395, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bffe3f7-5ac3-4f91-9f9a-b90100fc9529", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1472f374-7ab2-44f6-9146-f1a1d5dff509", "record_id": "flaws_cloudtrail:0000396:1472f374-7ab2-44f6-9146-f1a1d5dff509", "row_index": 396, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1472f374-7ab2-44f6-9146-f1a1d5dff509", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c556fbdd-1c9d-4400-bc15-7040c70da247", "record_id": "flaws_cloudtrail:0000397:c556fbdd-1c9d-4400-bc15-7040c70da247", "row_index": 397, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c556fbdd-1c9d-4400-bc15-7040c70da247", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d8d1a07-6161-4bee-b316-ad486af7464b", "record_id": "flaws_cloudtrail:0000398:5d8d1a07-6161-4bee-b316-ad486af7464b", "row_index": 398, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d8d1a07-6161-4bee-b316-ad486af7464b", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10aba41d-be7e-4df6-ba84-a29bfc5d8e0b", "record_id": "flaws_cloudtrail:0000399:10aba41d-be7e-4df6-ba84-a29bfc5d8e0b", "row_index": 399, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAADYQG5P1HQ2W4N5M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10aba41d-be7e-4df6-ba84-a29bfc5d8e0b", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAADYQG5P1HQ2W4N5M", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-19T00:42:36Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "551630a8-38e5-4db5-9350-7abaee2f20cd", "record_id": "flaws_cloudtrail:0000400:551630a8-38e5-4db5-9350-7abaee2f20cd", "row_index": 400, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "551630a8-38e5-4db5-9350-7abaee2f20cd", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34e1591c-1df9-4e9d-9b89-a2d5ee1fe3a0", "record_id": "flaws_cloudtrail:0000401:34e1591c-1df9-4e9d-9b89-a2d5ee1fe3a0", "row_index": 401, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34e1591c-1df9-4e9d-9b89-a2d5ee1fe3a0", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38d1500c-a2b3-45d3-a1cc-9bb144982cf2", "record_id": "flaws_cloudtrail:0000402:38d1500c-a2b3-45d3-a1cc-9bb144982cf2", "row_index": 402, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38d1500c-a2b3-45d3-a1cc-9bb144982cf2", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3d9d2b8-c782-495b-b35b-1f661392cb7a", "record_id": "flaws_cloudtrail:0000403:d3d9d2b8-c782-495b-b35b-1f661392cb7a", "row_index": 403, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3d9d2b8-c782-495b-b35b-1f661392cb7a", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00b8a22f-98fd-47a4-96f5-0ba054d93acf", "record_id": "flaws_cloudtrail:0000404:00b8a22f-98fd-47a4-96f5-0ba054d93acf", "row_index": 404, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00b8a22f-98fd-47a4-96f5-0ba054d93acf", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5549fa54-9001-4281-b089-2c6935d83c9f", "record_id": "flaws_cloudtrail:0000405:5549fa54-9001-4281-b089-2c6935d83c9f", "row_index": 405, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5549fa54-9001-4281-b089-2c6935d83c9f", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3e321196-f853-460d-acd4-81a5c50dbbbb", "record_id": "flaws_cloudtrail:0000406:d3e321196-f853-460d-acd4-81a5c50dbbbb", "row_index": 406, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3e321196-f853-460d-acd4-81a5c50dbbbb", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1a6580b-efce-4276-a7a2-b5e7ae6e5e6d", "record_id": "flaws_cloudtrail:0000407:a1a6580b-efce-4276-a7a2-b5e7ae6e5e6d", "row_index": 407, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1a6580b-efce-4276-a7a2-b5e7ae6e5e6d", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40d77e34-f356-4a23-b875-80a17f83d519", "record_id": "flaws_cloudtrail:0000408:40d77e34-f356-4a23-b875-80a17f83d519", "row_index": 408, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40d77e34-f356-4a23-b875-80a17f83d519", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bd01f86-88f7-41b2-b88f-97f794cdf704", "record_id": "flaws_cloudtrail:0000409:3bd01f86-88f7-41b2-b88f-97f794cdf704", "row_index": 409, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bd01f86-88f7-41b2-b88f-97f794cdf704", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b3881d3-0a32-4be6-90ac-2e73f43d9f41", "record_id": "flaws_cloudtrail:0000410:7b3881d3-0a32-4be6-90ac-2e73f43d9f41", "row_index": 410, "timestamp": "2018-10-19T00:42:46Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b3881d3-0a32-4be6-90ac-2e73f43d9f41", "eventTime": "2018-10-19T00:42:46Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e6f96a8-b755-4284-8913-1b75cd1002d7", "record_id": "flaws_cloudtrail:0000411:1e6f96a8-b755-4284-8913-1b75cd1002d7", "row_index": 411, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e6f96a8-b755-4284-8913-1b75cd1002d7", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c23937fe-f60d-4335-908f-e0e0a6e196ff", "record_id": "flaws_cloudtrail:0000412:c23937fe-f60d-4335-908f-e0e0a6e196ff", "row_index": 412, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c23937fe-f60d-4335-908f-e0e0a6e196ff", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33b68355-249e-4f75-829c-51393de9a49d", "record_id": "flaws_cloudtrail:0000413:33b68355-249e-4f75-829c-51393de9a49d", "row_index": 413, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33b68355-249e-4f75-829c-51393de9a49d", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee5b2159-43a2-4cad-8d5f-20d8217705a6", "record_id": "flaws_cloudtrail:0000414:ee5b2159-43a2-4cad-8d5f-20d8217705a6", "row_index": 414, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee5b2159-43a2-4cad-8d5f-20d8217705a6", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8765fd8-83dd-41bc-8735-3ad287f41a4d", "record_id": "flaws_cloudtrail:0000415:e8765fd8-83dd-41bc-8735-3ad287f41a4d", "row_index": 415, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8765fd8-83dd-41bc-8735-3ad287f41a4d", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19523db6-3f8d-484d-9a3a-41c209b346da", "record_id": "flaws_cloudtrail:0000416:19523db6-3f8d-484d-9a3a-41c209b346da", "row_index": 416, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19523db6-3f8d-484d-9a3a-41c209b346da", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a306f501-98ec-4e6b-9675-a647e50908d", "record_id": "flaws_cloudtrail:0000417:a306f501-98ec-4e6b-9675-a647e50908d", "row_index": 417, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a306f501-98ec-4e6b-9675-a647e50908d", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b00590d-9a09-4e11-8f43-e8f4826aa90d", "record_id": "flaws_cloudtrail:0000418:9b00590d-9a09-4e11-8f43-e8f4826aa90d", "row_index": 418, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b00590d-9a09-4e11-8f43-e8f4826aa90d", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bc772201-99bc-4a1c-ad63-eeee48dbc25d", "record_id": "flaws_cloudtrail:0000419:4bc772201-99bc-4a1c-ad63-eeee48dbc25d", "row_index": 419, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bc772201-99bc-4a1c-ad63-eeee48dbc25d", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62689c0-b121-4768-b650-6cf767669f9", "record_id": "flaws_cloudtrail:0000420:62689c0-b121-4768-b650-6cf767669f9", "row_index": 420, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA1X4JWRGKTZ80A2CB", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62689c0-b121-4768-b650-6cf767669f9", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA1X4JWRGKTZ80A2CB", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-19T00:42:45Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a79906-42f2-488b-98fc-cccf1b01e28c", "record_id": "flaws_cloudtrail:0000421:5a79906-42f2-488b-98fc-cccf1b01e28c", "row_index": 421, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a79906-42f2-488b-98fc-cccf1b01e28c", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45a87ddf-3cc9-493a-9285-14cfaeef47f9", "record_id": "flaws_cloudtrail:0000422:45a87ddf-3cc9-493a-9285-14cfaeef47f9", "row_index": 422, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45a87ddf-3cc9-493a-9285-14cfaeef47f9", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09496da4-0b7e-4480-b4a9-1aa1c22878cb", "record_id": "flaws_cloudtrail:0000423:09496da4-0b7e-4480-b4a9-1aa1c22878cb", "row_index": 423, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09496da4-0b7e-4480-b4a9-1aa1c22878cb", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e19e8a1-daab-48ea-9f05-361eae355aca", "record_id": "flaws_cloudtrail:0000424:1e19e8a1-daab-48ea-9f05-361eae355aca", "row_index": 424, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e19e8a1-daab-48ea-9f05-361eae355aca", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96490b-6f43-475f-95a3-244aca55581b", "record_id": "flaws_cloudtrail:0000425:96490b-6f43-475f-95a3-244aca55581b", "row_index": 425, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96490b-6f43-475f-95a3-244aca55581b", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cecf668-9f57-44f3-bbab-50c3adf7c436", "record_id": "flaws_cloudtrail:0000426:9cecf668-9f57-44f3-bbab-50c3adf7c436", "row_index": 426, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cecf668-9f57-44f3-bbab-50c3adf7c436", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f2bd54c-1648-4dae-bb55-252f105fee72", "record_id": "flaws_cloudtrail:0000427:1f2bd54c-1648-4dae-bb55-252f105fee72", "row_index": 427, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f2bd54c-1648-4dae-bb55-252f105fee72", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4f38cc4-b843-4ecf-a829-cc66b084d5d6", "record_id": "flaws_cloudtrail:0000428:e4f38cc4-b843-4ecf-a829-cc66b084d5d6", "row_index": 428, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4f38cc4-b843-4ecf-a829-cc66b084d5d6", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a00859b3-71f8-4f1b-9bc2-54efac74351", "record_id": "flaws_cloudtrail:0000429:a00859b3-71f8-4f1b-9bc2-54efac74351", "row_index": 429, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a00859b3-71f8-4f1b-9bc2-54efac74351", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64882fd1-8cbb-4485-96ea-e5a3c1fa5002", "record_id": "flaws_cloudtrail:0000430:64882fd1-8cbb-4485-96ea-e5a3c1fa5002", "row_index": 430, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64882fd1-8cbb-4485-96ea-e5a3c1fa5002", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b37c7746-ab48-4ede-b44c-c47187c6a238", "record_id": "flaws_cloudtrail:0000431:b37c7746-ab48-4ede-b44c-c47187c6a238", "row_index": 431, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b37c7746-ab48-4ede-b44c-c47187c6a238", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0c769fa-98f5-47c8-b9cb-eb06649c4b59", "record_id": "flaws_cloudtrail:0000432:b0c769fa-98f5-47c8-b9cb-eb06649c4b59", "row_index": 432, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0c769fa-98f5-47c8-b9cb-eb06649c4b59", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ef7811b-0ed2-4857-88be-f9076f77c1c5", "record_id": "flaws_cloudtrail:0000433:8ef7811b-0ed2-4857-88be-f9076f77c1c5", "row_index": 433, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ef7811b-0ed2-4857-88be-f9076f77c1c5", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f95a2fa8-1e8b-4bb3-b0fc-8533d1eb33f1", "record_id": "flaws_cloudtrail:0000434:f95a2fa8-1e8b-4bb3-b0fc-8533d1eb33f1", "row_index": 434, "timestamp": "2018-10-19T00:42:47Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f95a2fa8-1e8b-4bb3-b0fc-8533d1eb33f1", "eventTime": "2018-10-19T00:42:47Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7195c28-ca74-4557-9139-4bc0b0206f06", "record_id": "flaws_cloudtrail:0000435:d7195c28-ca74-4557-9139-4bc0b0206f06", "row_index": 435, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7195c28-ca74-4557-9139-4bc0b0206f06", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7baa0891-e4f6-4658-a6c1-1a625332af33", "record_id": "flaws_cloudtrail:0000436:7baa0891-e4f6-4658-a6c1-1a625332af33", "row_index": 436, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7baa0891-e4f6-4658-a6c1-1a625332af33", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fc658c4-0dad-4a4f-8804-3f0ac17428", "record_id": "flaws_cloudtrail:0000437:2fc658c4-0dad-4a4f-8804-3f0ac17428", "row_index": 437, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA5W5J7AXYYVQEMYAM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fc658c4-0dad-4a4f-8804-3f0ac17428", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA5W5J7AXYYVQEMYAM", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-19T00:42:45Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b367994be-86f9-4840-93bc-52466750b3ff", "record_id": "flaws_cloudtrail:0000438:b367994be-86f9-4840-93bc-52466750b3ff", "row_index": 438, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b367994be-86f9-4840-93bc-52466750b3ff", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "694fe045-f1af-4ce0-b539-507c4c81d655", "record_id": "flaws_cloudtrail:0000439:694fe045-f1af-4ce0-b539-507c4c81d655", "row_index": 439, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAD5GWINSICHOHYPWM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "694fe045-f1af-4ce0-b539-507c4c81d655", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAD5GWINSICHOHYPWM", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-19T00:42:48Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65060b8-f640-44df-ae4d-55270c988df8", "record_id": "flaws_cloudtrail:0000440:65060b8-f640-44df-ae4d-55270c988df8", "row_index": 440, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65060b8-f640-44df-ae4d-55270c988df8", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6a0becb-fb8f-474a-8aaf-86eb74f86489", "record_id": "flaws_cloudtrail:0000441:e6a0becb-fb8f-474a-8aaf-86eb74f86489", "row_index": 441, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6a0becb-fb8f-474a-8aaf-86eb74f86489", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65b620eb-4c21-4f83-b3be-7b3ef2c8914d", "record_id": "flaws_cloudtrail:0000442:65b620eb-4c21-4f83-b3be-7b3ef2c8914d", "row_index": 442, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIADDQQLW9NK3IYYB67", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65b620eb-4c21-4f83-b3be-7b3ef2c8914d", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIADDQQLW9NK3IYYB67", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-19T00:42:48Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eed4ebd8-d294-48b5-82b6-93e5411b1031", "record_id": "flaws_cloudtrail:0000443:eed4ebd8-d294-48b5-82b6-93e5411b1031", "row_index": 443, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eed4ebd8-d294-48b5-82b6-93e5411b1031", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccaf0b64-e008-429e-bd3d-7af81d6b3f50", "record_id": "flaws_cloudtrail:0000444:ccaf0b64-e008-429e-bd3d-7af81d6b3f50", "row_index": 444, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccaf0b64-e008-429e-bd3d-7af81d6b3f50", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b43241d-00de-4a8d-a14f-18c5e66e28fc", "record_id": "flaws_cloudtrail:0000445:b43241d-00de-4a8d-a14f-18c5e66e28fc", "row_index": 445, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b43241d-00de-4a8d-a14f-18c5e66e28fc", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b72f1f1-2f99-4ed5-8b7a-45c9d48e02c7", "record_id": "flaws_cloudtrail:0000446:8b72f1f1-2f99-4ed5-8b7a-45c9d48e02c7", "row_index": 446, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b72f1f1-2f99-4ed5-8b7a-45c9d48e02c7", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b78bd97f-b3de-4370-913e-9064c6fd0c67", "record_id": "flaws_cloudtrail:0000447:b78bd97f-b3de-4370-913e-9064c6fd0c67", "row_index": 447, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b78bd97f-b3de-4370-913e-9064c6fd0c67", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e98be5e9-30c1-4ce1-9d91-e5aae75e412f", "record_id": "flaws_cloudtrail:0000448:e98be5e9-30c1-4ce1-9d91-e5aae75e412f", "row_index": 448, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e98be5e9-30c1-4ce1-9d91-e5aae75e412f", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48bbb8d9-5a1a-4e8d-bc43-aab0cbdc9065", "record_id": "flaws_cloudtrail:0000449:48bbb8d9-5a1a-4e8d-bc43-aab0cbdc9065", "row_index": 449, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48bbb8d9-5a1a-4e8d-bc43-aab0cbdc9065", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84f8d6f0-4c35-485e-8a48-be160c7dfda4", "record_id": "flaws_cloudtrail:0000450:84f8d6f0-4c35-485e-8a48-be160c7dfda4", "row_index": 450, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84f8d6f0-4c35-485e-8a48-be160c7dfda4", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be459a95-81ef-43b4-a607-bc0a9fc32ec9", "record_id": "flaws_cloudtrail:0000451:be459a95-81ef-43b4-a607-bc0a9fc32ec9", "row_index": 451, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be459a95-81ef-43b4-a607-bc0a9fc32ec9", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "772eac06-0e3e-4e10-9d25-dc80c68e7205", "record_id": "flaws_cloudtrail:0000452:772eac06-0e3e-4e10-9d25-dc80c68e7205", "row_index": 452, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "772eac06-0e3e-4e10-9d25-dc80c68e7205", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "443546-7e04-4665-b0e9-4c571dfa0480", "record_id": "flaws_cloudtrail:0000453:443546-7e04-4665-b0e9-4c571dfa0480", "row_index": 453, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "443546-7e04-4665-b0e9-4c571dfa0480", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de04628-2ce5-40d3-a02a-b87663782c73", "record_id": "flaws_cloudtrail:0000454:de04628-2ce5-40d3-a02a-b87663782c73", "row_index": 454, "timestamp": "2018-10-19T00:42:48Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de04628-2ce5-40d3-a02a-b87663782c73", "eventTime": "2018-10-19T00:42:48Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e67d870-fe6e-47f1-ad2b-99f36b87712d", "record_id": "flaws_cloudtrail:0000455:4e67d870-fe6e-47f1-ad2b-99f36b87712d", "row_index": 455, "timestamp": "2018-10-19T00:42:50Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIARZB2CTAE6VJYD4F2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e67d870-fe6e-47f1-ad2b-99f36b87712d", "eventTime": "2018-10-19T00:42:50Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIARZB2CTAE6VJYD4F2", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-19T00:42:50Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e3932a0-cf6a-471d-9b3c-1b98c26f4abb", "record_id": "flaws_cloudtrail:0000456:2e3932a0-cf6a-471d-9b3c-1b98c26f4abb", "row_index": 456, "timestamp": "2018-10-19T00:42:50Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e3932a0-cf6a-471d-9b3c-1b98c26f4abb", "eventTime": "2018-10-19T00:42:50Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2167b6d9-48f6-44cd-8694-daa5e77b0c79", "record_id": "flaws_cloudtrail:0000457:2167b6d9-48f6-44cd-8694-daa5e77b0c79", "row_index": 457, "timestamp": "2018-10-19T00:42:50Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA6BKJFOV0B4DD93G3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2167b6d9-48f6-44cd-8694-daa5e77b0c79", "eventTime": "2018-10-19T00:42:50Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA6BKJFOV0B4DD93G3", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-19T00:42:46Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8af5c353-de1d-4f9d-8800-d08cbd78e46c", "record_id": "flaws_cloudtrail:0000458:8af5c353-de1d-4f9d-8800-d08cbd78e46c", "row_index": 458, "timestamp": "2018-10-19T00:42:50Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8af5c353-de1d-4f9d-8800-d08cbd78e46c", "eventTime": "2018-10-19T00:42:50Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e1a5375-b2ae-4912-893e-d3c069f3a54b", "record_id": "flaws_cloudtrail:0000459:2e1a5375-b2ae-4912-893e-d3c069f3a54b", "row_index": 459, "timestamp": "2018-10-19T00:42:50Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA6K7GRI84ERW9AV3K", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e1a5375-b2ae-4912-893e-d3c069f3a54b", "eventTime": "2018-10-19T00:42:50Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA6K7GRI84ERW9AV3K", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-19T00:42:46Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "026af32f-6cc4-4386-a059-925dfe619c50", "record_id": "flaws_cloudtrail:0000460:026af32f-6cc4-4386-a059-925dfe619c50", "row_index": 460, "timestamp": "2018-10-19T00:42:50Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "026af32f-6cc4-4386-a059-925dfe619c50", "eventTime": "2018-10-19T00:42:50Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47c186b9-be97-4352-b505-c7073a75fcad", "record_id": "flaws_cloudtrail:0000461:47c186b9-be97-4352-b505-c7073a75fcad", "row_index": 461, "timestamp": "2018-10-19T00:42:50Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47c186b9-be97-4352-b505-c7073a75fcad", "eventTime": "2018-10-19T00:42:50Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46b592380-6bf7-43fa-93b7-5da8d06d04db", "record_id": "flaws_cloudtrail:0000462:46b592380-6bf7-43fa-93b7-5da8d06d04db", "row_index": 462, "timestamp": "2018-10-19T00:42:50Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAWMF02K9NEU1X381H", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46b592380-6bf7-43fa-93b7-5da8d06d04db", "eventTime": "2018-10-19T00:42:50Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAWMF02K9NEU1X381H", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-19T00:42:50Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42670d5-b9e3-42bb-8fdd-dc51437e2c7b", "record_id": "flaws_cloudtrail:0000463:42670d5-b9e3-42bb-8fdd-dc51437e2c7b", "row_index": 463, "timestamp": "2018-10-19T00:42:50Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42670d5-b9e3-42bb-8fdd-dc51437e2c7b", "eventTime": "2018-10-19T00:42:50Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a43cc9f0-5d60-43f6-8b37-1bdfbdac746e", "record_id": "flaws_cloudtrail:0000464:a43cc9f0-5d60-43f6-8b37-1bdfbdac746e", "row_index": 464, "timestamp": "2018-10-19T00:42:50Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAVBRANVASB36B5Q20", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a43cc9f0-5d60-43f6-8b37-1bdfbdac746e", "eventTime": "2018-10-19T00:42:50Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAVBRANVASB36B5Q20", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-19T00:42:50Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acadc73b-3263-4c73-b28b-3ec5abc687c6", "record_id": "flaws_cloudtrail:0000465:acadc73b-3263-4c73-b28b-3ec5abc687c6", "row_index": 465, "timestamp": "2018-10-19T00:42:50Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acadc73b-3263-4c73-b28b-3ec5abc687c6", "eventTime": "2018-10-19T00:42:50Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "820244e-885e-494d-a0ca-8cfc2be62732", "record_id": "flaws_cloudtrail:0000466:820244e-885e-494d-a0ca-8cfc2be62732", "row_index": 466, "timestamp": "2018-10-19T00:42:50Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "820244e-885e-494d-a0ca-8cfc2be62732", "eventTime": "2018-10-19T00:42:50Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64f2577c-99e8-4ea5-b66e-9d8ddc48e504", "record_id": "flaws_cloudtrail:0000467:64f2577c-99e8-4ea5-b66e-9d8ddc48e504", "row_index": 467, "timestamp": "2018-10-19T00:42:50Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64f2577c-99e8-4ea5-b66e-9d8ddc48e504", "eventTime": "2018-10-19T00:42:50Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06da9ea4-ba37-45a6-8c5d-f8bfc009eb1b", "record_id": "flaws_cloudtrail:0000468:06da9ea4-ba37-45a6-8c5d-f8bfc009eb1b", "row_index": 468, "timestamp": "2018-10-19T00:42:50Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06da9ea4-ba37-45a6-8c5d-f8bfc009eb1b", "eventTime": "2018-10-19T00:42:50Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af3f7b81-52b5-44f3-b744-21c5addccb3b", "record_id": "flaws_cloudtrail:0000469:af3f7b81-52b5-44f3-b744-21c5addccb3b", "row_index": 469, "timestamp": "2018-10-19T00:42:50Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af3f7b81-52b5-44f3-b744-21c5addccb3b", "eventTime": "2018-10-19T00:42:50Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74d439f6-6ec3-46e5-ad10-66199d695f4e", "record_id": "flaws_cloudtrail:0000470:74d439f6-6ec3-46e5-ad10-66199d695f4e", "row_index": 470, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74d439f6-6ec3-46e5-ad10-66199d695f4e", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24a0b03f-af71-4371-aa4d-5ba0c673d14a", "record_id": "flaws_cloudtrail:0000471:24a0b03f-af71-4371-aa4d-5ba0c673d14a", "row_index": 471, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24a0b03f-af71-4371-aa4d-5ba0c673d14a", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41166e05-5b8f-40a8-a36f-24e5bf1ca18c", "record_id": "flaws_cloudtrail:0000472:41166e05-5b8f-40a8-a36f-24e5bf1ca18c", "row_index": 472, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41166e05-5b8f-40a8-a36f-24e5bf1ca18c", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1374b380-be37-441a-952b-5571155feac2", "record_id": "flaws_cloudtrail:0000473:1374b380-be37-441a-952b-5571155feac2", "row_index": 473, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1374b380-be37-441a-952b-5571155feac2", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87a1d53e-dd35-4a52-a0e4-f9318ece021f", "record_id": "flaws_cloudtrail:0000474:87a1d53e-dd35-4a52-a0e4-f9318ece021f", "row_index": 474, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87a1d53e-dd35-4a52-a0e4-f9318ece021f", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "961262-040f-486d-a4d2-9be75c92951", "record_id": "flaws_cloudtrail:0000475:961262-040f-486d-a4d2-9be75c92951", "row_index": 475, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "961262-040f-486d-a4d2-9be75c92951", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "667818e-132b-48be-9b31-7a688d358805f", "record_id": "flaws_cloudtrail:0000476:667818e-132b-48be-9b31-7a688d358805f", "row_index": 476, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "667818e-132b-48be-9b31-7a688d358805f", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebe75b24-f9a6-48b2-8738-8f1ed3d8a6fc", "record_id": "flaws_cloudtrail:0000477:ebe75b24-f9a6-48b2-8738-8f1ed3d8a6fc", "row_index": 477, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebe75b24-f9a6-48b2-8738-8f1ed3d8a6fc", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c5d8a6b-28c6-41c7-9f17-22c87b3f2c19", "record_id": "flaws_cloudtrail:0000478:3c5d8a6b-28c6-41c7-9f17-22c87b3f2c19", "row_index": 478, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c5d8a6b-28c6-41c7-9f17-22c87b3f2c19", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07d62f9b-9f7d-4d0c-b833-37cf9e8f6a06", "record_id": "flaws_cloudtrail:0000479:07d62f9b-9f7d-4d0c-b833-37cf9e8f6a06", "row_index": 479, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07d62f9b-9f7d-4d0c-b833-37cf9e8f6a06", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8cdf0b5-861d-468d-9778-4a507485a24f", "record_id": "flaws_cloudtrail:0000480:e8cdf0b5-861d-468d-9778-4a507485a24f", "row_index": 480, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8cdf0b5-861d-468d-9778-4a507485a24f", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae677d89-4e8c-4b37-9555-fb89a54ede30", "record_id": "flaws_cloudtrail:0000481:ae677d89-4e8c-4b37-9555-fb89a54ede30", "row_index": 481, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae677d89-4e8c-4b37-9555-fb89a54ede30", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11db7d7a-f203-4e79-b07f-2ce2bd90340a", "record_id": "flaws_cloudtrail:0000482:11db7d7a-f203-4e79-b07f-2ce2bd90340a", "row_index": 482, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11db7d7a-f203-4e79-b07f-2ce2bd90340a", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61488f7-48c2-45b4-969d-26e0dc8cddd8", "record_id": "flaws_cloudtrail:0000483:61488f7-48c2-45b4-969d-26e0dc8cddd8", "row_index": 483, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61488f7-48c2-45b4-969d-26e0dc8cddd8", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d6c76e4-4e4d-473d-a519-28a20fe676f2", "record_id": "flaws_cloudtrail:0000484:8d6c76e4-4e4d-473d-a519-28a20fe676f2", "row_index": 484, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d6c76e4-4e4d-473d-a519-28a20fe676f2", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c874041b-5082-4d0b-999e-ffd7c862beab", "record_id": "flaws_cloudtrail:0000485:c874041b-5082-4d0b-999e-ffd7c862beab", "row_index": 485, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c874041b-5082-4d0b-999e-ffd7c862beab", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd7c0678-0bdd-42c9-bf1b-5d71d5dff958", "record_id": "flaws_cloudtrail:0000486:fd7c0678-0bdd-42c9-bf1b-5d71d5dff958", "row_index": 486, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd7c0678-0bdd-42c9-bf1b-5d71d5dff958", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dbc8f7b-bdde-42dd-83c6-733d25fdb4bd", "record_id": "flaws_cloudtrail:0000487:8dbc8f7b-bdde-42dd-83c6-733d25fdb4bd", "row_index": 487, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dbc8f7b-bdde-42dd-83c6-733d25fdb4bd", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47afbaf9-0dae-4fdd-bb1d-9a4277e2d77d", "record_id": "flaws_cloudtrail:0000488:47afbaf9-0dae-4fdd-bb1d-9a4277e2d77d", "row_index": 488, "timestamp": "2018-10-19T00:42:51Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47afbaf9-0dae-4fdd-bb1d-9a4277e2d77d", "eventTime": "2018-10-19T00:42:51Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24a1f21e-07b5-4f3d-8a60-d568cf290c5b", "record_id": "flaws_cloudtrail:0000489:24a1f21e-07b5-4f3d-8a60-d568cf290c5b", "row_index": 489, "timestamp": "2018-10-19T00:42:52Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAAX64Y0HXA00AGBDQ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24a1f21e-07b5-4f3d-8a60-d568cf290c5b", "eventTime": "2018-10-19T00:42:52Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAAX64Y0HXA00AGBDQ", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-19T00:42:39Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee87d3d5-06a7-42dc-a311-fdaa5caa000e", "record_id": "flaws_cloudtrail:0000490:ee87d3d5-06a7-42dc-a311-fdaa5caa000e", "row_index": 490, "timestamp": "2018-10-19T00:42:52Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee87d3d5-06a7-42dc-a311-fdaa5caa000e", "eventTime": "2018-10-19T00:42:52Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79d1bea6-c2a2-48fd-845f-5d2a93cc2393", "record_id": "flaws_cloudtrail:0000491:79d1bea6-c2a2-48fd-845f-5d2a93cc2393", "row_index": 491, "timestamp": "2018-10-19T00:42:52Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79d1bea6-c2a2-48fd-845f-5d2a93cc2393", "eventTime": "2018-10-19T00:42:52Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27082daa-d951-4b98-946f-7c40efe89d5d", "record_id": "flaws_cloudtrail:0000492:27082daa-d951-4b98-946f-7c40efe89d5d", "row_index": 492, "timestamp": "2018-10-19T00:42:52Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAI0I3ZFIC1T799QQ8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27082daa-d951-4b98-946f-7c40efe89d5d", "eventTime": "2018-10-19T00:42:52Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAI0I3ZFIC1T799QQ8", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-19T00:42:48Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d97e0e1d-3033-4ce3-a4b1-ff4b3bf335829", "record_id": "flaws_cloudtrail:0000493:d97e0e1d-3033-4ce3-a4b1-ff4b3bf335829", "row_index": 493, "timestamp": "2018-10-19T00:42:52Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d97e0e1d-3033-4ce3-a4b1-ff4b3bf335829", "eventTime": "2018-10-19T00:42:52Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6d3e99f-fe5a-44e7-bff6-5f8b493082", "record_id": "flaws_cloudtrail:0000494:f6d3e99f-fe5a-44e7-bff6-5f8b493082", "row_index": 494, "timestamp": "2018-10-19T00:42:52Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6d3e99f-fe5a-44e7-bff6-5f8b493082", "eventTime": "2018-10-19T00:42:52Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08fee1d9-1736-4db7-909f-aab20d758ef3", "record_id": "flaws_cloudtrail:0000495:08fee1d9-1736-4db7-909f-aab20d758ef3", "row_index": 495, "timestamp": "2018-10-19T00:42:52Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08fee1d9-1736-4db7-909f-aab20d758ef3", "eventTime": "2018-10-19T00:42:52Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea741b84-7a98-4822-a5b0-07e8c93253e7", "record_id": "flaws_cloudtrail:0000496:ea741b84-7a98-4822-a5b0-07e8c93253e7", "row_index": 496, "timestamp": "2018-10-19T00:42:52Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAYBDFWNQBNDXUA9OH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea741b84-7a98-4822-a5b0-07e8c93253e7", "eventTime": "2018-10-19T00:42:52Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAYBDFWNQBNDXUA9OH", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-19T00:42:52Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf6dcfb1-4405-42d3-abef-2749231a70ea", "record_id": "flaws_cloudtrail:0000497:cf6dcfb1-4405-42d3-abef-2749231a70ea", "row_index": 497, "timestamp": "2018-10-19T00:42:52Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf6dcfb1-4405-42d3-abef-2749231a70ea", "eventTime": "2018-10-19T00:42:52Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5deeaeab-033c-47b5-a33a-0e1cd60502a5", "record_id": "flaws_cloudtrail:0000498:5deeaeab-033c-47b5-a33a-0e1cd60502a5", "row_index": 498, "timestamp": "2018-10-19T00:42:52Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5deeaeab-033c-47b5-a33a-0e1cd60502a5", "eventTime": "2018-10-19T00:42:52Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f4eb8b0-a407-4ae1-94f8-1e912777d52f3", "record_id": "flaws_cloudtrail:0000499:0f4eb8b0-a407-4ae1-94f8-1e912777d52f3", "row_index": 499, "timestamp": "2018-10-19T00:42:52Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f4eb8b0-a407-4ae1-94f8-1e912777d52f3", "eventTime": "2018-10-19T00:42:52Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c668521bb-6165-45ed-9c76-7deb3167f17a", "record_id": "flaws_cloudtrail:0000500:c668521bb-6165-45ed-9c76-7deb3167f17a", "row_index": 500, "timestamp": "2018-10-19T00:42:52Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c668521bb-6165-45ed-9c76-7deb3167f17a", "eventTime": "2018-10-19T00:42:52Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56a6bb5b-9f16-478c-90bc-ea4b353d6965", "record_id": "flaws_cloudtrail:0000501:56a6bb5b-9f16-478c-90bc-ea4b353d6965", "row_index": 501, "timestamp": "2018-10-19T00:42:52Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56a6bb5b-9f16-478c-90bc-ea4b353d6965", "eventTime": "2018-10-19T00:42:52Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28e76d7a-8a16-4146-89ac-f8182c3b4efc", "record_id": "flaws_cloudtrail:0000502:28e76d7a-8a16-4146-89ac-f8182c3b4efc", "row_index": 502, "timestamp": "2018-10-19T00:42:52Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28e76d7a-8a16-4146-89ac-f8182c3b4efc", "eventTime": "2018-10-19T00:42:52Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7faf4120-0684-403b-99c3-ce985ac4e95c", "record_id": "flaws_cloudtrail:0000503:7faf4120-0684-403b-99c3-ce985ac4e95c", "row_index": 503, "timestamp": "2018-10-19T00:42:52Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7faf4120-0684-403b-99c3-ce985ac4e95c", "eventTime": "2018-10-19T00:42:52Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a41777-d760-48d3-a5b8-e659511d207b3", "record_id": "flaws_cloudtrail:0000504:a41777-d760-48d3-a5b8-e659511d207b3", "row_index": 504, "timestamp": "2018-10-19T00:42:52Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a41777-d760-48d3-a5b8-e659511d207b3", "eventTime": "2018-10-19T00:42:52Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85d46d58-a956-4ee7-8d94-5965bb809968d", "record_id": "flaws_cloudtrail:0000505:85d46d58-a956-4ee7-8d94-5965bb809968d", "row_index": 505, "timestamp": "2018-10-19T00:42:53Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85d46d58-a956-4ee7-8d94-5965bb809968d", "eventTime": "2018-10-19T00:42:53Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c301ead0-d1a7-4db5-ab6b-df92ce57905c", "record_id": "flaws_cloudtrail:0000506:c301ead0-d1a7-4db5-ab6b-df92ce57905c", "row_index": 506, "timestamp": "2018-10-19T00:42:53Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAHWHULCUZTIK8GNHN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c301ead0-d1a7-4db5-ab6b-df92ce57905c", "eventTime": "2018-10-19T00:42:53Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAHWHULCUZTIK8GNHN", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-19T00:42:51Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e72a169-ef54-4719-be9e-3e826137501f", "record_id": "flaws_cloudtrail:0000507:3e72a169-ef54-4719-be9e-3e826137501f", "row_index": 507, "timestamp": "2018-10-19T00:42:53Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e72a169-ef54-4719-be9e-3e826137501f", "eventTime": "2018-10-19T00:42:53Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f86de16-b937-4ec0-b3a0-66fee9f605ea", "record_id": "flaws_cloudtrail:0000508:2f86de16-b937-4ec0-b3a0-66fee9f605ea", "row_index": 508, "timestamp": "2018-10-19T00:42:53Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA5WDL7PCASOQA4G92", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f86de16-b937-4ec0-b3a0-66fee9f605ea", "eventTime": "2018-10-19T00:42:53Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA5WDL7PCASOQA4G92", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-19T00:42:51Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71c27cdf-aabf-4efb-b59f-c9f16f42cc0a", "record_id": "flaws_cloudtrail:0000509:71c27cdf-aabf-4efb-b59f-c9f16f42cc0a", "row_index": 509, "timestamp": "2018-10-19T00:42:53Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71c27cdf-aabf-4efb-b59f-c9f16f42cc0a", "eventTime": "2018-10-19T00:42:53Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c10ca119-f7fa-4e96-808a-015509de1928", "record_id": "flaws_cloudtrail:0000510:c10ca119-f7fa-4e96-808a-015509de1928", "row_index": 510, "timestamp": "2018-10-19T00:43:03Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c10ca119-f7fa-4e96-808a-015509de1928", "eventTime": "2018-10-19T00:43:03Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcacae09-a7f1-42aa-9fd2-18637ac6793", "record_id": "flaws_cloudtrail:0000511:dcacae09-a7f1-42aa-9fd2-18637ac6793", "row_index": 511, "timestamp": "2018-10-19T00:43:03Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcacae09-a7f1-42aa-9fd2-18637ac6793", "eventTime": "2018-10-19T00:43:03Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a6f0517-935d-42c8-87c0-0a54777f6d28", "record_id": "flaws_cloudtrail:0000512:9a6f0517-935d-42c8-87c0-0a54777f6d28", "row_index": 512, "timestamp": "2018-10-19T00:43:03Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a6f0517-935d-42c8-87c0-0a54777f6d28", "eventTime": "2018-10-19T00:43:03Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "311de4d9-7631-4abc-8aa5-6cd62117d0d4", "record_id": "flaws_cloudtrail:0000513:311de4d9-7631-4abc-8aa5-6cd62117d0d4", "row_index": 513, "timestamp": "2018-10-19T00:43:03Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "311de4d9-7631-4abc-8aa5-6cd62117d0d4", "eventTime": "2018-10-19T00:43:03Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "309d074f-7d27-43b9-9604-f77d564f3c7f", "record_id": "flaws_cloudtrail:0000514:309d074f-7d27-43b9-9604-f77d564f3c7f", "row_index": 514, "timestamp": "2018-10-19T00:43:03Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "309d074f-7d27-43b9-9604-f77d564f3c7f", "eventTime": "2018-10-19T00:43:03Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8c2852b-a552-4e27-b9b4-675d46ab3e20", "record_id": "flaws_cloudtrail:0000515:f8c2852b-a552-4e27-b9b4-675d46ab3e20", "row_index": 515, "timestamp": "2018-10-19T00:43:04Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8c2852b-a552-4e27-b9b4-675d46ab3e20", "eventTime": "2018-10-19T00:43:04Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd883ebf-f341-40c3-abf1-f09bdfbf43b8", "record_id": "flaws_cloudtrail:0000516:dd883ebf-f341-40c3-abf1-f09bdfbf43b8", "row_index": 516, "timestamp": "2018-10-19T00:43:04Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd883ebf-f341-40c3-abf1-f09bdfbf43b8", "eventTime": "2018-10-19T00:43:04Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c213f5c0-bfbf-4819-8f9e-72438b7c527e", "record_id": "flaws_cloudtrail:0000517:c213f5c0-bfbf-4819-8f9e-72438b7c527e", "row_index": 517, "timestamp": "2018-10-19T00:43:04Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c213f5c0-bfbf-4819-8f9e-72438b7c527e", "eventTime": "2018-10-19T00:43:04Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3bd0885-4f02-4430-9d31-620678bb79c", "record_id": "flaws_cloudtrail:0000518:a3bd0885-4f02-4430-9d31-620678bb79c", "row_index": 518, "timestamp": "2018-10-19T00:43:04Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3bd0885-4f02-4430-9d31-620678bb79c", "eventTime": "2018-10-19T00:43:04Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "025dc9a4-2089-4b56-aa62-a69700b82ec5", "record_id": "flaws_cloudtrail:0000519:025dc9a4-2089-4b56-aa62-a69700b82ec5", "row_index": 519, "timestamp": "2018-10-19T00:43:05Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "025dc9a4-2089-4b56-aa62-a69700b82ec5", "eventTime": "2018-10-19T00:43:05Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d880801-9d73-4240-92fb-a39b7dff1de0", "record_id": "flaws_cloudtrail:0000520:6d880801-9d73-4240-92fb-a39b7dff1de0", "row_index": 520, "timestamp": "2018-10-19T00:43:05Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d880801-9d73-4240-92fb-a39b7dff1de0", "eventTime": "2018-10-19T00:43:05Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f16f5768-388c-475e-9135-f53a7c5d6433", "record_id": "flaws_cloudtrail:0000521:f16f5768-388c-475e-9135-f53a7c5d6433", "row_index": 521, "timestamp": "2018-10-19T00:43:05Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f16f5768-388c-475e-9135-f53a7c5d6433", "eventTime": "2018-10-19T00:43:05Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a807e0a-cd35-4b22-94cc-6c5b9ea3ca85", "record_id": "flaws_cloudtrail:0000522:8a807e0a-cd35-4b22-94cc-6c5b9ea3ca85", "row_index": 522, "timestamp": "2018-10-19T00:43:05Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a807e0a-cd35-4b22-94cc-6c5b9ea3ca85", "eventTime": "2018-10-19T00:43:05Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc647c30-3f7d-4a98-96b8-0a9a950da3af", "record_id": "flaws_cloudtrail:0000523:cc647c30-3f7d-4a98-96b8-0a9a950da3af", "row_index": 523, "timestamp": "2018-10-19T00:43:05Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc647c30-3f7d-4a98-96b8-0a9a950da3af", "eventTime": "2018-10-19T00:43:05Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfa176d4-6596-4951-bc10-0bbd18b73577", "record_id": "flaws_cloudtrail:0000524:cfa176d4-6596-4951-bc10-0bbd18b73577", "row_index": 524, "timestamp": "2018-10-19T00:43:05Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfa176d4-6596-4951-bc10-0bbd18b73577", "eventTime": "2018-10-19T00:43:05Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60eb0559-1e1b-4d27-8895-9b9aee092dc1", "record_id": "flaws_cloudtrail:0000525:60eb0559-1e1b-4d27-8895-9b9aee092dc1", "row_index": 525, "timestamp": "2018-10-19T00:43:07Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60eb0559-1e1b-4d27-8895-9b9aee092dc1", "eventTime": "2018-10-19T00:43:07Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4056e7d-111b-48ec-807d-f85ff5691b6a", "record_id": "flaws_cloudtrail:0000526:b4056e7d-111b-48ec-807d-f85ff5691b6a", "row_index": 526, "timestamp": "2018-10-19T00:43:16Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4056e7d-111b-48ec-807d-f85ff5691b6a", "eventTime": "2018-10-19T00:43:16Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "902d1fa9-d846-4054-a70f-0eb1d48289be", "record_id": "flaws_cloudtrail:0000527:902d1fa9-d846-4054-a70f-0eb1d48289be", "row_index": 527, "timestamp": "2018-10-19T00:43:16Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "902d1fa9-d846-4054-a70f-0eb1d48289be", "eventTime": "2018-10-19T00:43:16Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b72e261c-187a-47ba-8261-703388de9e8c", "record_id": "flaws_cloudtrail:0000528:b72e261c-187a-47ba-8261-703388de9e8c", "row_index": 528, "timestamp": "2018-10-19T00:43:16Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b72e261c-187a-47ba-8261-703388de9e8c", "eventTime": "2018-10-19T00:43:16Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98a08ee6-7227-4b6a-a132-af0de6f4e560", "record_id": "flaws_cloudtrail:0000529:98a08ee6-7227-4b6a-a132-af0de6f4e560", "row_index": 529, "timestamp": "2018-10-19T00:43:16Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98a08ee6-7227-4b6a-a132-af0de6f4e560", "eventTime": "2018-10-19T00:43:16Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c7b124f-35fe-4aeb-b81a-dffe674db349", "record_id": "flaws_cloudtrail:0000530:7c7b124f-35fe-4aeb-b81a-dffe674db349", "row_index": 530, "timestamp": "2018-10-19T00:43:16Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c7b124f-35fe-4aeb-b81a-dffe674db349", "eventTime": "2018-10-19T00:43:16Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12d120ef-abea-4029-8ad4-dabe088c2be1", "record_id": "flaws_cloudtrail:0000531:12d120ef-abea-4029-8ad4-dabe088c2be1", "row_index": 531, "timestamp": "2018-10-19T00:43:16Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12d120ef-abea-4029-8ad4-dabe088c2be1", "eventTime": "2018-10-19T00:43:16Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a3c6416-1361-4a1e-b734-26f21afff2f5", "record_id": "flaws_cloudtrail:0000532:6a3c6416-1361-4a1e-b734-26f21afff2f5", "row_index": 532, "timestamp": "2018-10-19T00:43:16Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a3c6416-1361-4a1e-b734-26f21afff2f5", "eventTime": "2018-10-19T00:43:16Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afac8d7e-ca9e-4724-b877-13a6bb187b9e", "record_id": "flaws_cloudtrail:0000533:afac8d7e-ca9e-4724-b877-13a6bb187b9e", "row_index": 533, "timestamp": "2018-10-19T00:43:16Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afac8d7e-ca9e-4724-b877-13a6bb187b9e", "eventTime": "2018-10-19T00:43:16Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc516ba7-7751-4827-ba7a-acb1216fab1d", "record_id": "flaws_cloudtrail:0000534:dc516ba7-7751-4827-ba7a-acb1216fab1d", "row_index": 534, "timestamp": "2018-10-19T00:43:16Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc516ba7-7751-4827-ba7a-acb1216fab1d", "eventTime": "2018-10-19T00:43:16Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9df1b5d-decc-4388-9be4-c7154fbb7669", "record_id": "flaws_cloudtrail:0000535:d9df1b5d-decc-4388-9be4-c7154fbb7669", "row_index": 535, "timestamp": "2018-10-19T00:43:16Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9df1b5d-decc-4388-9be4-c7154fbb7669", "eventTime": "2018-10-19T00:43:16Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c82fad4-ba88-4b2d-9678-6a415e6c2919", "record_id": "flaws_cloudtrail:0000536:7c82fad4-ba88-4b2d-9678-6a415e6c2919", "row_index": 536, "timestamp": "2018-10-19T00:43:16Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c82fad4-ba88-4b2d-9678-6a415e6c2919", "eventTime": "2018-10-19T00:43:16Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c00d57a-f719-4d94-900e-dbe3a86c85e5", "record_id": "flaws_cloudtrail:0000537:7c00d57a-f719-4d94-900e-dbe3a86c85e5", "row_index": 537, "timestamp": "2018-10-19T00:43:16Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c00d57a-f719-4d94-900e-dbe3a86c85e5", "eventTime": "2018-10-19T00:43:16Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "321fbf8a-b1c0-4fc6-bd78-8f45e10c0c56", "record_id": "flaws_cloudtrail:0000538:321fbf8a-b1c0-4fc6-bd78-8f45e10c0c56", "row_index": 538, "timestamp": "2018-10-19T00:43:17Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "321fbf8a-b1c0-4fc6-bd78-8f45e10c0c56", "eventTime": "2018-10-19T00:43:17Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec171400-805d-49d6-9d84-f22409a768", "record_id": "flaws_cloudtrail:0000539:ec171400-805d-49d6-9d84-f22409a768", "row_index": 539, "timestamp": "2018-10-19T00:43:17Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec171400-805d-49d6-9d84-f22409a768", "eventTime": "2018-10-19T00:43:17Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2df76427-b7d1-4190-9629-28ba8ae61603", "record_id": "flaws_cloudtrail:0000540:2df76427-b7d1-4190-9629-28ba8ae61603", "row_index": 540, "timestamp": "2018-10-19T00:43:17Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2df76427-b7d1-4190-9629-28ba8ae61603", "eventTime": "2018-10-19T00:43:17Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "320eab42-ed8d-4c15-b5ea-7791cfa75789", "record_id": "flaws_cloudtrail:0000541:320eab42-ed8d-4c15-b5ea-7791cfa75789", "row_index": 541, "timestamp": "2018-10-19T00:43:17Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "320eab42-ed8d-4c15-b5ea-7791cfa75789", "eventTime": "2018-10-19T00:43:17Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31ba4993-2a70-4fe6-8fc7-6acf8f60dc69", "record_id": "flaws_cloudtrail:0000542:31ba4993-2a70-4fe6-8fc7-6acf8f60dc69", "row_index": 542, "timestamp": "2018-10-19T00:43:17Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31ba4993-2a70-4fe6-8fc7-6acf8f60dc69", "eventTime": "2018-10-19T00:43:17Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a55d1ffa-84c2-47fe-b35a-a50c05e94e94", "record_id": "flaws_cloudtrail:0000543:a55d1ffa-84c2-47fe-b35a-a50c05e94e94", "row_index": 543, "timestamp": "2018-10-19T00:43:17Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a55d1ffa-84c2-47fe-b35a-a50c05e94e94", "eventTime": "2018-10-19T00:43:17Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc1825e8-87ab-45e4-b214-2d2d0bc899767", "record_id": "flaws_cloudtrail:0000544:cc1825e8-87ab-45e4-b214-2d2d0bc899767", "row_index": 544, "timestamp": "2018-10-19T00:43:17Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc1825e8-87ab-45e4-b214-2d2d0bc899767", "eventTime": "2018-10-19T00:43:17Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "352e2f63-8ed7-46de-af74-86d39629c", "record_id": "flaws_cloudtrail:0000545:352e2f63-8ed7-46de-af74-86d39629c", "row_index": 545, "timestamp": "2018-10-19T00:43:17Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "352e2f63-8ed7-46de-af74-86d39629c", "eventTime": "2018-10-19T00:43:17Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "913fb2eb-3bf8-411e-b64f-a4d28acbc331", "record_id": "flaws_cloudtrail:0000546:913fb2eb-3bf8-411e-b64f-a4d28acbc331", "row_index": 546, "timestamp": "2018-10-19T00:43:18Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "913fb2eb-3bf8-411e-b64f-a4d28acbc331", "eventTime": "2018-10-19T00:43:18Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18cc2fbf-8e7e-4203-923a-49f0dc6bfa20", "record_id": "flaws_cloudtrail:0000547:18cc2fbf-8e7e-4203-923a-49f0dc6bfa20", "row_index": 547, "timestamp": "2018-10-19T00:43:18Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18cc2fbf-8e7e-4203-923a-49f0dc6bfa20", "eventTime": "2018-10-19T00:43:18Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d358d44-75c1-4a91-aaa2-3fe4dd9acca8", "record_id": "flaws_cloudtrail:0000548:8d358d44-75c1-4a91-aaa2-3fe4dd9acca8", "row_index": 548, "timestamp": "2018-10-19T00:43:18Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d358d44-75c1-4a91-aaa2-3fe4dd9acca8", "eventTime": "2018-10-19T00:43:18Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00374edf-f00a-46d2-907e-beff6be09fc7", "record_id": "flaws_cloudtrail:0000549:00374edf-f00a-46d2-907e-beff6be09fc7", "row_index": 549, "timestamp": "2018-10-19T00:43:18Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00374edf-f00a-46d2-907e-beff6be09fc7", "eventTime": "2018-10-19T00:43:18Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "235750-eb7d-4b71-862d-d84ca96870e7", "record_id": "flaws_cloudtrail:0000550:235750-eb7d-4b71-862d-d84ca96870e7", "row_index": 550, "timestamp": "2018-10-19T00:43:18Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "235750-eb7d-4b71-862d-d84ca96870e7", "eventTime": "2018-10-19T00:43:18Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0b3c78a-610a-4b13-9b2e-e588b806caf5", "record_id": "flaws_cloudtrail:0000551:a0b3c78a-610a-4b13-9b2e-e588b806caf5", "row_index": 551, "timestamp": "2018-10-19T00:43:18Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0b3c78a-610a-4b13-9b2e-e588b806caf5", "eventTime": "2018-10-19T00:43:18Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05fcc1be-3830-479a-a524-810ea8d41af1", "record_id": "flaws_cloudtrail:0000552:05fcc1be-3830-479a-a524-810ea8d41af1", "row_index": 552, "timestamp": "2018-10-19T00:43:18Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05fcc1be-3830-479a-a524-810ea8d41af1", "eventTime": "2018-10-19T00:43:18Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03c4b7d1-1b24-4942-b41c-0be6f98abe8d", "record_id": "flaws_cloudtrail:0000553:03c4b7d1-1b24-4942-b41c-0be6f98abe8d", "row_index": 553, "timestamp": "2018-10-19T00:43:18Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03c4b7d1-1b24-4942-b41c-0be6f98abe8d", "eventTime": "2018-10-19T00:43:18Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "682ee35a-0ebe-4173-a711-6dce1d71eacc", "record_id": "flaws_cloudtrail:0000554:682ee35a-0ebe-4173-a711-6dce1d71eacc", "row_index": 554, "timestamp": "2018-10-19T00:43:18Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "682ee35a-0ebe-4173-a711-6dce1d71eacc", "eventTime": "2018-10-19T00:43:18Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b1984b5-a3cd-4821-9e59-f0cefab71566", "record_id": "flaws_cloudtrail:0000555:3b1984b5-a3cd-4821-9e59-f0cefab71566", "row_index": 555, "timestamp": "2018-10-19T00:43:19Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b1984b5-a3cd-4821-9e59-f0cefab71566", "eventTime": "2018-10-19T00:43:19Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "328f6051-1934-41e4-89b8-250871eeab945", "record_id": "flaws_cloudtrail:0000556:328f6051-1934-41e4-89b8-250871eeab945", "row_index": 556, "timestamp": "2018-10-19T00:43:20Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "328f6051-1934-41e4-89b8-250871eeab945", "eventTime": "2018-10-19T00:43:20Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96841fe4-770f-4fb6-97d4-aad12c095ab4", "record_id": "flaws_cloudtrail:0000557:96841fe4-770f-4fb6-97d4-aad12c095ab4", "row_index": 557, "timestamp": "2018-10-19T00:43:23Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96841fe4-770f-4fb6-97d4-aad12c095ab4", "eventTime": "2018-10-19T00:43:23Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cbd2187-dffd-4b21-af83-58d63882fd", "record_id": "flaws_cloudtrail:0000558:8cbd2187-dffd-4b21-af83-58d63882fd", "row_index": 558, "timestamp": "2018-10-19T00:43:23Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cbd2187-dffd-4b21-af83-58d63882fd", "eventTime": "2018-10-19T00:43:23Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-southeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b52230ec-e900-486a-ad49-e52b19338cc", "record_id": "flaws_cloudtrail:0000559:b52230ec-e900-486a-ad49-e52b19338cc", "row_index": 559, "timestamp": "2018-10-19T00:43:24Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b52230ec-e900-486a-ad49-e52b19338cc", "eventTime": "2018-10-19T00:43:24Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f36135-14f5-4019-bd0a-85d234052a6c", "record_id": "flaws_cloudtrail:0000560:2f36135-14f5-4019-bd0a-85d234052a6c", "row_index": 560, "timestamp": "2018-10-19T00:43:24Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f36135-14f5-4019-bd0a-85d234052a6c", "eventTime": "2018-10-19T00:43:24Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-northeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daab2ebc-cae3-4279-abfd-b79f9b19b3a6", "record_id": "flaws_cloudtrail:0000561:daab2ebc-cae3-4279-abfd-b79f9b19b3a6", "row_index": 561, "timestamp": "2018-10-19T00:43:24Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daab2ebc-cae3-4279-abfd-b79f9b19b3a6", "eventTime": "2018-10-19T00:43:24Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ae2e24a-b295-4e73-959f-417e74cb3472", "record_id": "flaws_cloudtrail:0000562:7ae2e24a-b295-4e73-959f-417e74cb3472", "row_index": 562, "timestamp": "2018-10-19T00:43:24Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ae2e24a-b295-4e73-959f-417e74cb3472", "eventTime": "2018-10-19T00:43:24Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-northeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc2d814b-9ebb-4bb5-9044-01f8f020418f", "record_id": "flaws_cloudtrail:0000563:bc2d814b-9ebb-4bb5-9044-01f8f020418f", "row_index": 563, "timestamp": "2018-10-19T00:43:24Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc2d814b-9ebb-4bb5-9044-01f8f020418f", "eventTime": "2018-10-19T00:43:24Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "beb9607f-1f87-4c4f-a60e-37223bd368a5", "record_id": "flaws_cloudtrail:0000564:beb9607f-1f87-4c4f-a60e-37223bd368a5", "row_index": 564, "timestamp": "2018-10-19T00:43:24Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "beb9607f-1f87-4c4f-a60e-37223bd368a5", "eventTime": "2018-10-19T00:43:24Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-south-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e70a139-6462-49e7-9841-ddf6934c8bde", "record_id": "flaws_cloudtrail:0000565:5e70a139-6462-49e7-9841-ddf6934c8bde", "row_index": 565, "timestamp": "2018-10-19T00:43:24Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e70a139-6462-49e7-9841-ddf6934c8bde", "eventTime": "2018-10-19T00:43:24Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-southeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06664b0-0eb9-4856-a576-65e7512a39f5", "record_id": "flaws_cloudtrail:0000566:06664b0-0eb9-4856-a576-65e7512a39f5", "row_index": 566, "timestamp": "2018-10-19T00:43:24Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06664b0-0eb9-4856-a576-65e7512a39f5", "eventTime": "2018-10-19T00:43:24Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80a4a870-c685-4e17-8438-864750e9f2406", "record_id": "flaws_cloudtrail:0000567:80a4a870-c685-4e17-8438-864750e9f2406", "row_index": 567, "timestamp": "2018-10-19T00:43:24Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80a4a870-c685-4e17-8438-864750e9f2406", "eventTime": "2018-10-19T00:43:24Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ca-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "127141cf-e431-4f2c-b8b8-9fd994e7b11b", "record_id": "flaws_cloudtrail:0000568:127141cf-e431-4f2c-b8b8-9fd994e7b11b", "row_index": 568, "timestamp": "2018-10-19T00:43:24Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "127141cf-e431-4f2c-b8b8-9fd994e7b11b", "eventTime": "2018-10-19T00:43:24Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bb0df1e-825b-43bd-917e-a7cfc6ef62ff", "record_id": "flaws_cloudtrail:0000569:1bb0df1e-825b-43bd-917e-a7cfc6ef62ff", "row_index": 569, "timestamp": "2018-10-19T00:43:24Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bb0df1e-825b-43bd-917e-a7cfc6ef62ff", "eventTime": "2018-10-19T00:43:24Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f1c3057-0d08-40d4-9716-f94c436e2a81", "record_id": "flaws_cloudtrail:0000570:7f1c3057-0d08-40d4-9716-f94c436e2a81", "row_index": 570, "timestamp": "2018-10-19T00:43:24Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f1c3057-0d08-40d4-9716-f94c436e2a81", "eventTime": "2018-10-19T00:43:24Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56eee85e-2436-4670-b6e6-b709948c0a47c", "record_id": "flaws_cloudtrail:0000571:56eee85e-2436-4670-b6e6-b709948c0a47c", "row_index": 571, "timestamp": "2018-10-19T00:43:24Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56eee85e-2436-4670-b6e6-b709948c0a47c", "eventTime": "2018-10-19T00:43:24Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b75e987f-1bc0-4915-87c1-0ecee8af173d", "record_id": "flaws_cloudtrail:0000572:b75e987f-1bc0-4915-87c1-0ecee8af173d", "row_index": 572, "timestamp": "2018-10-19T00:43:24Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b75e987f-1bc0-4915-87c1-0ecee8af173d", "eventTime": "2018-10-19T00:43:24Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83a0fb0e-c282-462b-be5a-d1a626d9aa60", "record_id": "flaws_cloudtrail:0000573:83a0fb0e-c282-462b-be5a-d1a626d9aa60", "row_index": 573, "timestamp": "2018-10-19T00:43:24Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83a0fb0e-c282-462b-be5a-d1a626d9aa60", "eventTime": "2018-10-19T00:43:24Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "941eeff0-4c9e-4579-b7a6-eb7cf0ee1acc", "record_id": "flaws_cloudtrail:0000574:941eeff0-4c9e-4579-b7a6-eb7cf0ee1acc", "row_index": 574, "timestamp": "2018-10-19T00:43:25Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 874, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "941eeff0-4c9e-4579-b7a6-eb7cf0ee1acc", "eventTime": "2018-10-19T00:43:25Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c81f265-8b51-44e8-948e-d7a3e8a63a92", "record_id": "flaws_cloudtrail:0000575:0c81f265-8b51-44e8-948e-d7a3e8a63a92", "row_index": 575, "timestamp": "2018-10-19T00:43:25Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c81f265-8b51-44e8-948e-d7a3e8a63a92", "eventTime": "2018-10-19T00:43:25Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c526c3d-589d-414b-bd61-f9f4519b22e5", "record_id": "flaws_cloudtrail:0000576:2c526c3d-589d-414b-bd61-f9f4519b22e5", "row_index": 576, "timestamp": "2018-10-19T00:43:25Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c526c3d-589d-414b-bd61-f9f4519b22e5", "eventTime": "2018-10-19T00:43:25Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-west-3:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91a04a3b-ecb8-4aeb-96fd-d847740590fb", "record_id": "flaws_cloudtrail:0000577:91a04a3b-ecb8-4aeb-96fd-d847740590fb", "row_index": 577, "timestamp": "2018-10-19T00:43:25Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91a04a3b-ecb8-4aeb-96fd-d847740590fb", "eventTime": "2018-10-19T00:43:25Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c54592-95fb-4672-b14d-dd63ce3a99a3", "record_id": "flaws_cloudtrail:0000578:c54592-95fb-4672-b14d-dd63ce3a99a3", "row_index": 578, "timestamp": "2018-10-19T00:43:26Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c54592-95fb-4672-b14d-dd63ce3a99a3", "eventTime": "2018-10-19T00:43:26Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:sa-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82acc6b6-482d-4f16-af29-b68cdf4912a6", "record_id": "flaws_cloudtrail:0000579:82acc6b6-482d-4f16-af29-b68cdf4912a6", "row_index": 579, "timestamp": "2018-10-19T00:43:26Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82acc6b6-482d-4f16-af29-b68cdf4912a6", "eventTime": "2018-10-19T00:43:26Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58e40a1c-51cb-4e96-86b9-7c4617c55a76", "record_id": "flaws_cloudtrail:0000580:58e40a1c-51cb-4e96-86b9-7c4617c55a76", "row_index": 580, "timestamp": "2018-10-19T00:43:26Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58e40a1c-51cb-4e96-86b9-7c4617c55a76", "eventTime": "2018-10-19T00:43:26Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06306f-ac11-4b16-91f5-78feb062c05b", "record_id": "flaws_cloudtrail:0000581:06306f-ac11-4b16-91f5-78feb062c05b", "row_index": 581, "timestamp": "2018-10-19T00:43:26Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06306f-ac11-4b16-91f5-78feb062c05b", "eventTime": "2018-10-19T00:43:26Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05113ca-db23-4b64-bd36-cf003debd518", "record_id": "flaws_cloudtrail:0000582:05113ca-db23-4b64-bd36-cf003debd518", "row_index": 582, "timestamp": "2018-10-19T00:43:26Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05113ca-db23-4b64-bd36-cf003debd518", "eventTime": "2018-10-19T00:43:26Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-east-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63930d7f-1951-4cef-b032-af63717f9043", "record_id": "flaws_cloudtrail:0000583:63930d7f-1951-4cef-b032-af63717f9043", "row_index": 583, "timestamp": "2018-10-19T00:43:26Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63930d7f-1951-4cef-b032-af63717f9043", "eventTime": "2018-10-19T00:43:26Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80e1d03f-a723-42e3-8660-b59c883a838c", "record_id": "flaws_cloudtrail:0000584:80e1d03f-a723-42e3-8660-b59c883a838c", "row_index": 584, "timestamp": "2018-10-19T00:43:26Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80e1d03f-a723-42e3-8660-b59c883a838c", "eventTime": "2018-10-19T00:43:26Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9455eb90-940a-47d2-ab74-a09e328e71c6", "record_id": "flaws_cloudtrail:0000585:9455eb90-940a-47d2-ab74-a09e328e71c6", "row_index": 585, "timestamp": "2018-10-19T00:43:26Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9455eb90-940a-47d2-ab74-a09e328e71c6", "eventTime": "2018-10-19T00:43:26Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da55a05d-e9d5-432b-9be8-e93b0fd772202", "record_id": "flaws_cloudtrail:0000586:da55a05d-e9d5-432b-9be8-e93b0fd772202", "row_index": 586, "timestamp": "2018-10-19T00:43:26Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da55a05d-e9d5-432b-9be8-e93b0fd772202", "eventTime": "2018-10-19T00:43:26Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf6f7fb1-2639-424d-98f9-e0545c43fde3", "record_id": "flaws_cloudtrail:0000587:cf6f7fb1-2639-424d-98f9-e0545c43fde3", "row_index": 587, "timestamp": "2018-10-19T00:43:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf6f7fb1-2639-424d-98f9-e0545c43fde3", "eventTime": "2018-10-19T00:43:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "Boto3/1.7.1 Python/2.7.12 Linux/4.4.0-53329-Microsoft Botocore/1.10.1", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "120247b22-d5da-41d1-8752-dd736604f50b", "record_id": "flaws_cloudtrail:0000588:120247b22-d5da-41d1-8752-dd736604f50b", "row_index": 588, "timestamp": "2018-10-19T00:45:05Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-53329-Microsoft botocore/1.4.70]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "120247b22-d5da-41d1-8752-dd736604f50b", "eventTime": "2018-10-19T00:45:05Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-53329-Microsoft botocore/1.4.70]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fae49be-8d6d-476e-9d9d-8e17c94d664d", "record_id": "flaws_cloudtrail:0000589:1fae49be-8d6d-476e-9d9d-8e17c94d664d", "row_index": 589, "timestamp": "2018-10-19T00:45:34Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-53329-Microsoft botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fae49be-8d6d-476e-9d9d-8e17c94d664d", "eventTime": "2018-10-19T00:45:34Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-53329-Microsoft botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dafd7f38-4a47-427e-a0fb-0b5b0a3f3a06", "record_id": "flaws_cloudtrail:0000590:dafd7f38-4a47-427e-a0fb-0b5b0a3f3a06", "row_index": 590, "timestamp": "2018-10-19T00:45:52Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-53329-Microsoft botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dafd7f38-4a47-427e-a0fb-0b5b0a3f3a06", "eventTime": "2018-10-19T00:45:52Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-53329-Microsoft botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea2391c2-0e78-4dc0-8676-835550f258e01", "record_id": "flaws_cloudtrail:0000591:ea2391c2-0e78-4dc0-8676-835550f258e01", "row_index": 591, "timestamp": "2018-10-19T00:46:14Z", "event_type": "ListSSHPublicKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "135.250.223.6", "user_agent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-53329-Microsoft botocore/1.4.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea2391c2-0e78-4dc0-8676-835550f258e01", "eventTime": "2018-10-19T00:46:14Z", "eventName": "ListSSHPublicKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "135.250.223.6", "userAgent": "aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-53329-Microsoft botocore/1.4.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"sSHPublicKeys": [], "isTruncated": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b93270b-0dad-4e9a-84a9-3de9ba345ef2", "record_id": "flaws_cloudtrail:0000592:2b93270b-0dad-4e9a-84a9-3de9ba345ef2", "row_index": 592, "timestamp": "2018-10-19T01:10:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1482, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b93270b-0dad-4e9a-84a9-3de9ba345ef2", "eventTime": "2018-10-19T01:10:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3UWKI0ATKUB6HG5S", "expiration": "Oct 19, 2018 7:37:42 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4588a1a-d2bf-476a-8483-0078e2b1c267", "record_id": "flaws_cloudtrail:0000593:b4588a1a-d2bf-476a-8483-0078e2b1c267", "row_index": 593, "timestamp": "2018-10-19T02:10:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1481, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4588a1a-d2bf-476a-8483-0078e2b1c267", "eventTime": "2018-10-19T02:10:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYLTYNKSEFLJU9IYJ", "expiration": "Oct 19, 2018 8:33:00 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf116cbf-6d4e-4eba-98b5-514e9ae4ec1f", "record_id": "flaws_cloudtrail:0000594:cf116cbf-6d4e-4eba-98b5-514e9ae4ec1f", "row_index": 594, "timestamp": "2018-10-19T02:36:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1217, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf116cbf-6d4e-4eba-98b5-514e9ae4ec1f", "eventTime": "2018-10-19T02:36:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMQKC4H1V0EI7PCQT", "expiration": "Oct 19, 2018 2:36:33 PM", "sessionToken": "FQoGZXIvYXdzEHwaDIaGte5fhYXDHPbZ8yLfAYZhJpDy3v8qczAdpxvmqGHyW9R50UUIlhmzDydgEXINWKSPPejbucVOam4ANlyFJYZv1BFeY3MuG/FrS+1n8THmpep/h6RGNl/bF3hbWyxNOZRCoA3X+3wxdfJESvANsvIjd46bjBUIkIsk+HmOE/Sz+/ah7A13sJaxbpmiz/8gJDp41v5pwXfFydrU7Nr1vA+E+2r0getR99mvSnU0wR7n7Hk8Ofu/tYA8BZ3ywF2EGY6iTo0zdUxQlj2E7NkUSBDowNdhi+wgOkUFAr/PjXcFvLvl/5HFkKMhxINfR5AosYal3gU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "659ad6ec-5ae1-44f4-ac8c-92cbc5d72ad9", "record_id": "flaws_cloudtrail:0000595:659ad6ec-5ae1-44f4-ac8c-92cbc5d72ad9", "row_index": 595, "timestamp": "2018-10-19T02:36:33Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAMQKC4H1V0EI7PCQT", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "187.3.250.0", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "659ad6ec-5ae1-44f4-ac8c-92cbc5d72ad9", "eventTime": "2018-10-19T02:36:33Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "187.3.250.0", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAMQKC4H1V0EI7PCQT", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-10-19T02:36:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2018/10/19/[$LATEST]275cc962c34dadec821558f0b896259a", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25a3123b-3d78-469e-b098-67945cd5df", "record_id": "flaws_cloudtrail:0000596:25a3123b-3d78-469e-b098-67945cd5df", "row_index": 596, "timestamp": "2018-10-19T03:10:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1480, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25a3123b-3d78-469e-b098-67945cd5df", "eventTime": "2018-10-19T03:10:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABXRACTIUZXQC3WY2", "expiration": "Oct 19, 2018 9:36:09 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72afb119-dcac-4ba7-93e2-b5950caa85ba", "record_id": "flaws_cloudtrail:0000597:72afb119-dcac-4ba7-93e2-b5950caa85ba", "row_index": 597, "timestamp": "2018-10-19T04:10:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1480, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72afb119-dcac-4ba7-93e2-b5950caa85ba", "eventTime": "2018-10-19T04:10:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOWF9H76JGLO3FUF0", "expiration": "Oct 19, 2018 10:43:12 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1701a819-1b83-4622-8a53-bc4f1c761811", "record_id": "flaws_cloudtrail:0000598:1701a819-1b83-4622-8a53-bc4f1c761811", "row_index": 598, "timestamp": "2018-10-19T05:10:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1483, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1701a819-1b83-4622-8a53-bc4f1c761811", "eventTime": "2018-10-19T05:10:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAE85LDAZUU9IMAYK1", "expiration": "Oct 19, 2018 11:26:02 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d77f56f0-0eca-48f5-9d75-ab9f986400b4", "record_id": "flaws_cloudtrail:0000599:d77f56f0-0eca-48f5-9d75-ab9f986400b4", "row_index": 599, "timestamp": "2018-10-19T05:22:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAJTQ5XPSJNHKXEORS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "99.91.62.203", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 531, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d77f56f0-0eca-48f5-9d75-ab9f986400b4", "eventTime": "2018-10-19T05:22:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "99.91.62.203", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAJTQ5XPSJNHKXEORS", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8d6db52-0a52-4940-adc2-ed62cb208397", "record_id": "flaws_cloudtrail:0000600:f8d6db52-0a52-4940-adc2-ed62cb208397", "row_index": 600, "timestamp": "2018-10-19T05:24:01Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAJTQ5XPSJNHKXEORS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "99.91.62.203", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 535, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8d6db52-0a52-4940-adc2-ed62cb208397", "eventTime": "2018-10-19T05:24:01Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "99.91.62.203", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAJTQ5XPSJNHKXEORS", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d760307b-ee83-4e79-9332-ab752b964def", "record_id": "flaws_cloudtrail:0000601:d760307b-ee83-4e79-9332-ab752b964def", "row_index": 601, "timestamp": "2018-10-19T05:25:32Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAJTQ5XPSJNHKXEORS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "99.91.62.203", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-9415"], "raw_record_size_bytes": 660, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d760307b-ee83-4e79-9332-ab752b964def", "eventTime": "2018-10-19T05:25:32Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "99.91.62.203", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAJTQ5XPSJNHKXEORS", "userName": "Level6"}, "requestParameters": {"name": "trail-9415"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-9415"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a42a03c-76f1-4bc8-b5d4-459c2c15de45", "record_id": "flaws_cloudtrail:0000602:7a42a03c-76f1-4bc8-b5d4-459c2c15de45", "row_index": 602, "timestamp": "2018-10-19T05:27:15Z", "event_type": "StopLogging", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAJTQ5XPSJNHKXEORS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "99.91.62.203", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-9415"], "raw_record_size_bytes": 657, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a42a03c-76f1-4bc8-b5d4-459c2c15de45", "eventTime": "2018-10-19T05:27:15Z", "eventName": "StopLogging", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "99.91.62.203", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAJTQ5XPSJNHKXEORS", "userName": "Level6"}, "requestParameters": {"name": "trail-9415"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-9415"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3564513f-705e-405f-8ff3-c87fbefad7d4", "record_id": "flaws_cloudtrail:0000603:3564513f-705e-405f-8ff3-c87fbefad7d4", "row_index": 603, "timestamp": "2018-10-19T05:28:44Z", "event_type": "UpdateTrail", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAJTQ5XPSJNHKXEORS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "99.91.62.203", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-9415"], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3564513f-705e-405f-8ff3-c87fbefad7d4", "eventTime": "2018-10-19T05:28:44Z", "eventName": "UpdateTrail", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "99.91.62.203", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAJTQ5XPSJNHKXEORS", "userName": "Level6"}, "requestParameters": {"name": "trail-9415", "isMultiRegionTrail": false, "enableLogFileValidation": false}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-9415"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd0ebe02-6b19-4ed1-87a8-3a0a749fdaa5", "record_id": "flaws_cloudtrail:0000604:cd0ebe02-6b19-4ed1-87a8-3a0a749fdaa5", "row_index": 604, "timestamp": "2018-10-19T05:52:29Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd0ebe02-6b19-4ed1-87a8-3a0a749fdaa5", "eventTime": "2018-10-19T05:52:29Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQ851W27O6XXK1SMV", "expiration": "Oct 19, 2018 6:52:29 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}