Task: attack_reconstruction (flaws_cloudtrail)
Prompt: One principal appears to gain a foothold and then conduct a broad AWS inventory sweep spanning IAM, EC2/VPC, S3, Lambda, and RDS. Identify the responsible principal, the MITRE ATT&CK technique that best describes the behavior, the supporting CloudTrail record_ids grouped by each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d868963-b821-45fe-95e0-0d07d0dbc3a7", "record_id": "flaws_cloudtrail:0000000:d868963-b821-45fe-95e0-0d07d0dbc3a7", "row_index": 0, "timestamp": "2019-07-22T17:23:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d868963-b821-45fe-95e0-0d07d0dbc3a7", "eventTime": "2019-07-22T17:23:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e9661c3-66ff-4dc6-908d-ff143bba264d", "record_id": "flaws_cloudtrail:0000001:5e9661c3-66ff-4dc6-908d-ff143bba264d", "row_index": 1, "timestamp": "2019-07-22T17:23:38Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e9661c3-66ff-4dc6-908d-ff143bba264d", "eventTime": "2019-07-22T17:23:38Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cb3bd26-374e-40f9-afed-f5d61f937cac", "record_id": "flaws_cloudtrail:0000002:9cb3bd26-374e-40f9-afed-f5d61f937cac", "row_index": 2, "timestamp": "2019-07-22T17:23:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cb3bd26-374e-40f9-afed-f5d61f937cac", "eventTime": "2019-07-22T17:23:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "292c6459-c5bf-4c66-9c12-71c735b131b0", "record_id": "flaws_cloudtrail:0000003:292c6459-c5bf-4c66-9c12-71c735b131b0", "row_index": 3, "timestamp": "2019-07-22T17:23:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "292c6459-c5bf-4c66-9c12-71c735b131b0", "eventTime": "2019-07-22T17:23:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a3320d0-b009-4bbf-816e-51e4ec8dc060", "record_id": "flaws_cloudtrail:0000004:8a3320d0-b009-4bbf-816e-51e4ec8dc060", "row_index": 4, "timestamp": "2019-07-22T17:23:38Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a3320d0-b009-4bbf-816e-51e4ec8dc060", "eventTime": "2019-07-22T17:23:38Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a38f324-703f-4240-ac56-60b735a7c188", "record_id": "flaws_cloudtrail:0000005:4a38f324-703f-4240-ac56-60b735a7c188", "row_index": 5, "timestamp": "2019-07-22T17:23:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a38f324-703f-4240-ac56-60b735a7c188", "eventTime": "2019-07-22T17:23:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "565acf1f-b32b-468a-bf91-55d4b19b9de4", "record_id": "flaws_cloudtrail:0000006:565acf1f-b32b-468a-bf91-55d4b19b9de4", "row_index": 6, "timestamp": "2019-07-22T17:23:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "565acf1f-b32b-468a-bf91-55d4b19b9de4", "eventTime": "2019-07-22T17:23:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b4e42c9-5832-4e12-8942-76d07f7944bd", "record_id": "flaws_cloudtrail:0000007:1b4e42c9-5832-4e12-8942-76d07f7944bd", "row_index": 7, "timestamp": "2019-07-22T17:23:38Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b4e42c9-5832-4e12-8942-76d07f7944bd", "eventTime": "2019-07-22T17:23:38Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46e5a20c-0a7d-4672-8742-fba3f97afa11", "record_id": "flaws_cloudtrail:0000008:46e5a20c-0a7d-4672-8742-fba3f97afa11", "row_index": 8, "timestamp": "2019-07-22T17:23:38Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46e5a20c-0a7d-4672-8742-fba3f97afa11", "eventTime": "2019-07-22T17:23:38Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:sa-east-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dcf3af1-f60d-4395-8646-8a9f328245", "record_id": "flaws_cloudtrail:0000009:8dcf3af1-f60d-4395-8646-8a9f328245", "row_index": 9, "timestamp": "2019-07-22T17:23:38Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dcf3af1-f60d-4395-8646-8a9f328245", "eventTime": "2019-07-22T17:23:38Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:us-east-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a143b95-0faa-4e1f-8dc1-81b69bcff333", "record_id": "flaws_cloudtrail:0000010:5a143b95-0faa-4e1f-8dc1-81b69bcff333", "row_index": 10, "timestamp": "2019-07-22T17:23:38Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a143b95-0faa-4e1f-8dc1-81b69bcff333", "eventTime": "2019-07-22T17:23:38Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a64396-3df8-44a8-80ed-ba1495b2c85a", "record_id": "flaws_cloudtrail:0000011:a64396-3df8-44a8-80ed-ba1495b2c85a", "row_index": 11, "timestamp": "2019-07-22T17:23:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a64396-3df8-44a8-80ed-ba1495b2c85a", "eventTime": "2019-07-22T17:23:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc9d4fb4-0b8e-4867-9cc4-576fd6ce80b4", "record_id": "flaws_cloudtrail:0000012:cc9d4fb4-0b8e-4867-9cc4-576fd6ce80b4", "row_index": 12, "timestamp": "2019-07-22T17:23:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc9d4fb4-0b8e-4867-9cc4-576fd6ce80b4", "eventTime": "2019-07-22T17:23:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "506f7299-05cb-4df4-aefc-bdd58b181f45", "record_id": "flaws_cloudtrail:0000013:506f7299-05cb-4df4-aefc-bdd58b181f45", "row_index": 13, "timestamp": "2019-07-22T17:23:38Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "506f7299-05cb-4df4-aefc-bdd58b181f45", "eventTime": "2019-07-22T17:23:38Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f44cb6e9-9806-4e03-9894-2fd6d34b21e6", "record_id": "flaws_cloudtrail:0000014:f44cb6e9-9806-4e03-9894-2fd6d34b21e6", "row_index": 14, "timestamp": "2019-07-22T17:23:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f44cb6e9-9806-4e03-9894-2fd6d34b21e6", "eventTime": "2019-07-22T17:23:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3a99a09-f0f2-4e99-bcd0-b567ee7adcad", "record_id": "flaws_cloudtrail:0000015:b3a99a09-f0f2-4e99-bcd0-b567ee7adcad", "row_index": 15, "timestamp": "2019-07-22T17:23:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3a99a09-f0f2-4e99-bcd0-b567ee7adcad", "eventTime": "2019-07-22T17:23:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e51c544d-b7a3-469d-aa04-bcbb173c654e", "record_id": "flaws_cloudtrail:0000016:e51c544d-b7a3-469d-aa04-bcbb173c654e", "row_index": 16, "timestamp": "2019-07-22T17:23:38Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e51c544d-b7a3-469d-aa04-bcbb173c654e", "eventTime": "2019-07-22T17:23:38Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:us-west-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d153efc-c6d0-4e25-a4e4-8be8d09f0945", "record_id": "flaws_cloudtrail:0000017:6d153efc-c6d0-4e25-a4e4-8be8d09f0945", "row_index": 17, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d153efc-c6d0-4e25-a4e4-8be8d09f0945", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15eeea36-a16c-4cf5-a26e-cc09b900b288", "record_id": "flaws_cloudtrail:0000018:15eeea36-a16c-4cf5-a26e-cc09b900b288", "row_index": 18, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15eeea36-a16c-4cf5-a26e-cc09b900b288", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2633a7c-73bd-4670-be2f-7706fa5377c7", "record_id": "flaws_cloudtrail:0000019:b2633a7c-73bd-4670-be2f-7706fa5377c7", "row_index": 19, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2633a7c-73bd-4670-be2f-7706fa5377c7", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac178154a-8d0a-4013-9a2c-8dbf769fdec8", "record_id": "flaws_cloudtrail:0000020:ac178154a-8d0a-4013-9a2c-8dbf769fdec8", "row_index": 20, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac178154a-8d0a-4013-9a2c-8dbf769fdec8", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b299105-62ac-427f-bf7a-31e8b944b915", "record_id": "flaws_cloudtrail:0000021:b299105-62ac-427f-bf7a-31e8b944b915", "row_index": 21, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b299105-62ac-427f-bf7a-31e8b944b915", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-southeast-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8df1bb4f-db41-4fe5-821f-9cbee1788a25", "record_id": "flaws_cloudtrail:0000022:8df1bb4f-db41-4fe5-821f-9cbee1788a25", "row_index": 22, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8df1bb4f-db41-4fe5-821f-9cbee1788a25", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fd9f470-d843-4443-8025-35b9a7be5c08", "record_id": "flaws_cloudtrail:0000023:7fd9f470-d843-4443-8025-35b9a7be5c08", "row_index": 23, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fd9f470-d843-4443-8025-35b9a7be5c08", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7d1b2f4-8faa-4e1a-9268-bd4fe1893d3c", "record_id": "flaws_cloudtrail:0000024:c7d1b2f4-8faa-4e1a-9268-bd4fe1893d3c", "row_index": 24, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7d1b2f4-8faa-4e1a-9268-bd4fe1893d3c", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c55d79c7-5c70-4aed-97ae-f5e8e493a8c9", "record_id": "flaws_cloudtrail:0000025:c55d79c7-5c70-4aed-97ae-f5e8e493a8c9", "row_index": 25, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c55d79c7-5c70-4aed-97ae-f5e8e493a8c9", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c4016f3-872b-4699-8747-074308f48cd64", "record_id": "flaws_cloudtrail:0000026:4c4016f3-872b-4699-8747-074308f48cd64", "row_index": 26, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c4016f3-872b-4699-8747-074308f48cd64", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c602700b-6837-44b2-9afd-86077097f28e", "record_id": "flaws_cloudtrail:0000027:6c602700b-6837-44b2-9afd-86077097f28e", "row_index": 27, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c602700b-6837-44b2-9afd-86077097f28e", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fbf2501-3365-4e97-bd7e-0e4d134ab2b5", "record_id": "flaws_cloudtrail:0000028:8fbf2501-3365-4e97-bd7e-0e4d134ab2b5", "row_index": 28, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fbf2501-3365-4e97-bd7e-0e4d134ab2b5", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "473997ff-2c0c-4d77-8fda-366a3273c69e", "record_id": "flaws_cloudtrail:0000029:473997ff-2c0c-4d77-8fda-366a3273c69e", "row_index": 29, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "473997ff-2c0c-4d77-8fda-366a3273c69e", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95fb6e82-f402-4a02-8121-27301e0ab", "record_id": "flaws_cloudtrail:0000030:95fb6e82-f402-4a02-8121-27301e0ab", "row_index": 30, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95fb6e82-f402-4a02-8121-27301e0ab", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c77e058b-228e-49a0-a687-51a56ff8085d", "record_id": "flaws_cloudtrail:0000031:c77e058b-228e-49a0-a687-51a56ff8085d", "row_index": 31, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c77e058b-228e-49a0-a687-51a56ff8085d", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "963f43fa-8282-4db8-b892-9828d3fa9e5e", "record_id": "flaws_cloudtrail:0000032:963f43fa-8282-4db8-b892-9828d3fa9e5e", "row_index": 32, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "963f43fa-8282-4db8-b892-9828d3fa9e5e", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ecadc88-88ff-4607-9a46-a5b4ea335c0f", "record_id": "flaws_cloudtrail:0000033:9ecadc88-88ff-4607-9a46-a5b4ea335c0f", "row_index": 33, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ecadc88-88ff-4607-9a46-a5b4ea335c0f", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b138ae43-840d-4aa5-b60a-67f8fe7a3fbd", "record_id": "flaws_cloudtrail:0000034:b138ae43-840d-4aa5-b60a-67f8fe7a3fbd", "row_index": 34, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b138ae43-840d-4aa5-b60a-67f8fe7a3fbd", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "985aef95-a5e9-4ef0-856c-6c6d1f63baac", "record_id": "flaws_cloudtrail:0000035:985aef95-a5e9-4ef0-856c-6c6d1f63baac", "row_index": 35, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "985aef95-a5e9-4ef0-856c-6c6d1f63baac", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e1c5ad5-d711-4195-97df-d9064550b23d", "record_id": "flaws_cloudtrail:0000036:0e1c5ad5-d711-4195-97df-d9064550b23d", "row_index": 36, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e1c5ad5-d711-4195-97df-d9064550b23d", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c70dbc50-bf2d-4245-b086-c21b8bf88af7", "record_id": "flaws_cloudtrail:0000037:c70dbc50-bf2d-4245-b086-c21b8bf88af7", "row_index": 37, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c70dbc50-bf2d-4245-b086-c21b8bf88af7", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ceb1ef2e-e151-4309-bd23-803bc9ad93f7", "record_id": "flaws_cloudtrail:0000038:ceb1ef2e-e151-4309-bd23-803bc9ad93f7", "row_index": 38, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ceb1ef2e-e151-4309-bd23-803bc9ad93f7", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45bbb2dc-dd5d-4293-ba67-4ca4d30d2489", "record_id": "flaws_cloudtrail:0000039:45bbb2dc-dd5d-4293-ba67-4ca4d30d2489", "row_index": 39, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45bbb2dc-dd5d-4293-ba67-4ca4d30d2489", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "030666d8-1d6c-4c5e-bbf1-c188c5c2a387", "record_id": "flaws_cloudtrail:0000040:030666d8-1d6c-4c5e-bbf1-c188c5c2a387", "row_index": 40, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "030666d8-1d6c-4c5e-bbf1-c188c5c2a387", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "947ea7f0-b27d-4b5f-a03d-7a9206b6d723", "record_id": "flaws_cloudtrail:0000041:947ea7f0-b27d-4b5f-a03d-7a9206b6d723", "row_index": 41, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "947ea7f0-b27d-4b5f-a03d-7a9206b6d723", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f0d6cf3-5872-4dfb-b8e5-d6b8cfce57ac", "record_id": "flaws_cloudtrail:0000042:3f0d6cf3-5872-4dfb-b8e5-d6b8cfce57ac", "row_index": 42, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f0d6cf3-5872-4dfb-b8e5-d6b8cfce57ac", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d153efc-c6d0-4e25-a4e4-8be8d09f0945", "record_id": "flaws_cloudtrail:0000043:6d153efc-c6d0-4e25-a4e4-8be8d09f0945", "row_index": 43, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d153efc-c6d0-4e25-a4e4-8be8d09f0945", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15eeea36-a16c-4cf5-a26e-cc09b900b288", "record_id": "flaws_cloudtrail:0000044:15eeea36-a16c-4cf5-a26e-cc09b900b288", "row_index": 44, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15eeea36-a16c-4cf5-a26e-cc09b900b288", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2633a7c-73bd-4670-be2f-7706fa5377c7", "record_id": "flaws_cloudtrail:0000045:b2633a7c-73bd-4670-be2f-7706fa5377c7", "row_index": 45, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2633a7c-73bd-4670-be2f-7706fa5377c7", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac178154a-8d0a-4013-9a2c-8dbf769fdec8", "record_id": "flaws_cloudtrail:0000046:ac178154a-8d0a-4013-9a2c-8dbf769fdec8", "row_index": 46, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac178154a-8d0a-4013-9a2c-8dbf769fdec8", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b299105-62ac-427f-bf7a-31e8b944b915", "record_id": "flaws_cloudtrail:0000047:b299105-62ac-427f-bf7a-31e8b944b915", "row_index": 47, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b299105-62ac-427f-bf7a-31e8b944b915", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-southeast-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8df1bb4f-db41-4fe5-821f-9cbee1788a25", "record_id": "flaws_cloudtrail:0000048:8df1bb4f-db41-4fe5-821f-9cbee1788a25", "row_index": 48, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8df1bb4f-db41-4fe5-821f-9cbee1788a25", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fd9f470-d843-4443-8025-35b9a7be5c08", "record_id": "flaws_cloudtrail:0000049:7fd9f470-d843-4443-8025-35b9a7be5c08", "row_index": 49, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fd9f470-d843-4443-8025-35b9a7be5c08", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7d1b2f4-8faa-4e1a-9268-bd4fe1893d3c", "record_id": "flaws_cloudtrail:0000050:c7d1b2f4-8faa-4e1a-9268-bd4fe1893d3c", "row_index": 50, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7d1b2f4-8faa-4e1a-9268-bd4fe1893d3c", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c55d79c7-5c70-4aed-97ae-f5e8e493a8c9", "record_id": "flaws_cloudtrail:0000051:c55d79c7-5c70-4aed-97ae-f5e8e493a8c9", "row_index": 51, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c55d79c7-5c70-4aed-97ae-f5e8e493a8c9", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c4016f3-872b-4699-8747-074308f48cd64", "record_id": "flaws_cloudtrail:0000052:4c4016f3-872b-4699-8747-074308f48cd64", "row_index": 52, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c4016f3-872b-4699-8747-074308f48cd64", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c602700b-6837-44b2-9afd-86077097f28e", "record_id": "flaws_cloudtrail:0000053:6c602700b-6837-44b2-9afd-86077097f28e", "row_index": 53, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c602700b-6837-44b2-9afd-86077097f28e", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fbf2501-3365-4e97-bd7e-0e4d134ab2b5", "record_id": "flaws_cloudtrail:0000054:8fbf2501-3365-4e97-bd7e-0e4d134ab2b5", "row_index": 54, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fbf2501-3365-4e97-bd7e-0e4d134ab2b5", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "473997ff-2c0c-4d77-8fda-366a3273c69e", "record_id": "flaws_cloudtrail:0000055:473997ff-2c0c-4d77-8fda-366a3273c69e", "row_index": 55, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "473997ff-2c0c-4d77-8fda-366a3273c69e", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95fb6e82-f402-4a02-8121-27301e0ab", "record_id": "flaws_cloudtrail:0000056:95fb6e82-f402-4a02-8121-27301e0ab", "row_index": 56, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95fb6e82-f402-4a02-8121-27301e0ab", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c77e058b-228e-49a0-a687-51a56ff8085d", "record_id": "flaws_cloudtrail:0000057:c77e058b-228e-49a0-a687-51a56ff8085d", "row_index": 57, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c77e058b-228e-49a0-a687-51a56ff8085d", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "963f43fa-8282-4db8-b892-9828d3fa9e5e", "record_id": "flaws_cloudtrail:0000058:963f43fa-8282-4db8-b892-9828d3fa9e5e", "row_index": 58, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "963f43fa-8282-4db8-b892-9828d3fa9e5e", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ecadc88-88ff-4607-9a46-a5b4ea335c0f", "record_id": "flaws_cloudtrail:0000059:9ecadc88-88ff-4607-9a46-a5b4ea335c0f", "row_index": 59, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ecadc88-88ff-4607-9a46-a5b4ea335c0f", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b138ae43-840d-4aa5-b60a-67f8fe7a3fbd", "record_id": "flaws_cloudtrail:0000060:b138ae43-840d-4aa5-b60a-67f8fe7a3fbd", "row_index": 60, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b138ae43-840d-4aa5-b60a-67f8fe7a3fbd", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "985aef95-a5e9-4ef0-856c-6c6d1f63baac", "record_id": "flaws_cloudtrail:0000061:985aef95-a5e9-4ef0-856c-6c6d1f63baac", "row_index": 61, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "985aef95-a5e9-4ef0-856c-6c6d1f63baac", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e1c5ad5-d711-4195-97df-d9064550b23d", "record_id": "flaws_cloudtrail:0000062:0e1c5ad5-d711-4195-97df-d9064550b23d", "row_index": 62, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e1c5ad5-d711-4195-97df-d9064550b23d", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c70dbc50-bf2d-4245-b086-c21b8bf88af7", "record_id": "flaws_cloudtrail:0000063:c70dbc50-bf2d-4245-b086-c21b8bf88af7", "row_index": 63, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c70dbc50-bf2d-4245-b086-c21b8bf88af7", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ceb1ef2e-e151-4309-bd23-803bc9ad93f7", "record_id": "flaws_cloudtrail:0000064:ceb1ef2e-e151-4309-bd23-803bc9ad93f7", "row_index": 64, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ceb1ef2e-e151-4309-bd23-803bc9ad93f7", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45bbb2dc-dd5d-4293-ba67-4ca4d30d2489", "record_id": "flaws_cloudtrail:0000065:45bbb2dc-dd5d-4293-ba67-4ca4d30d2489", "row_index": 65, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45bbb2dc-dd5d-4293-ba67-4ca4d30d2489", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "947ea7f0-b27d-4b5f-a03d-7a9206b6d723", "record_id": "flaws_cloudtrail:0000066:947ea7f0-b27d-4b5f-a03d-7a9206b6d723", "row_index": 66, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "947ea7f0-b27d-4b5f-a03d-7a9206b6d723", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f0d6cf3-5872-4dfb-b8e5-d6b8cfce57ac", "record_id": "flaws_cloudtrail:0000067:3f0d6cf3-5872-4dfb-b8e5-d6b8cfce57ac", "row_index": 67, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f0d6cf3-5872-4dfb-b8e5-d6b8cfce57ac", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "030666d8-1d6c-4c5e-bbf1-c188c5c2a387", "record_id": "flaws_cloudtrail:0000068:030666d8-1d6c-4c5e-bbf1-c188c5c2a387", "row_index": 68, "timestamp": "2019-07-22T17:23:39Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "030666d8-1d6c-4c5e-bbf1-c188c5c2a387", "eventTime": "2019-07-22T17:23:39Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f5a3a1c-f4a6-49f9-9da6-6f5b0ca8e55b", "record_id": "flaws_cloudtrail:0000069:0f5a3a1c-f4a6-49f9-9da6-6f5b0ca8e55b", "row_index": 69, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f5a3a1c-f4a6-49f9-9da6-6f5b0ca8e55b", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17d7a8cb-f900-42e9-81e0-6c70a35cf506", "record_id": "flaws_cloudtrail:0000070:17d7a8cb-f900-42e9-81e0-6c70a35cf506", "row_index": 70, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17d7a8cb-f900-42e9-81e0-6c70a35cf506", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3573cc2e-9a05-4e32-9c71-e6f6d162081a", "record_id": "flaws_cloudtrail:0000071:3573cc2e-9a05-4e32-9c71-e6f6d162081a", "row_index": 71, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3573cc2e-9a05-4e32-9c71-e6f6d162081a", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baee6526-2994-4352-abcc-66dc1f41cdd1", "record_id": "flaws_cloudtrail:0000072:baee6526-2994-4352-abcc-66dc1f41cdd1", "row_index": 72, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baee6526-2994-4352-abcc-66dc1f41cdd1", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62a2f970-2f1a-442d-abfe-6c19eae2a72f", "record_id": "flaws_cloudtrail:0000073:62a2f970-2f1a-442d-abfe-6c19eae2a72f", "row_index": 73, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62a2f970-2f1a-442d-abfe-6c19eae2a72f", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2511baa8-6cab-469a-a1df-f6110955df1a", "record_id": "flaws_cloudtrail:0000074:2511baa8-6cab-469a-a1df-f6110955df1a", "row_index": 74, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2511baa8-6cab-469a-a1df-f6110955df1a", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c1a46b9-74ab-4f09-a2ea-02969b544163", "record_id": "flaws_cloudtrail:0000075:8c1a46b9-74ab-4f09-a2ea-02969b544163", "row_index": 75, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c1a46b9-74ab-4f09-a2ea-02969b544163", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5450f1c7-a1a9-4aa9-ac42-c37f6936cb4a", "record_id": "flaws_cloudtrail:0000076:5450f1c7-a1a9-4aa9-ac42-c37f6936cb4a", "row_index": 76, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5450f1c7-a1a9-4aa9-ac42-c37f6936cb4a", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3904f594-4a93-4edb-977b-b283cede3f7b", "record_id": "flaws_cloudtrail:0000077:3904f594-4a93-4edb-977b-b283cede3f7b", "row_index": 77, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3904f594-4a93-4edb-977b-b283cede3f7b", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f289481f-4c2f-4543-8fa2-4ee8515f9256", "record_id": "flaws_cloudtrail:0000078:f289481f-4c2f-4543-8fa2-4ee8515f9256", "row_index": 78, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f289481f-4c2f-4543-8fa2-4ee8515f9256", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "666807a-acc9-4efe-9213-b684c1e5bb67", "record_id": "flaws_cloudtrail:0000079:666807a-acc9-4efe-9213-b684c1e5bb67", "row_index": 79, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "666807a-acc9-4efe-9213-b684c1e5bb67", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6144b7d-a287-425a-bd5c-076219b89ceb", "record_id": "flaws_cloudtrail:0000080:c6144b7d-a287-425a-bd5c-076219b89ceb", "row_index": 80, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6144b7d-a287-425a-bd5c-076219b89ceb", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d421152e1-bae0-484c-8b1f-2d7550485e6b", "record_id": "flaws_cloudtrail:0000081:d421152e1-bae0-484c-8b1f-2d7550485e6b", "row_index": 81, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d421152e1-bae0-484c-8b1f-2d7550485e6b", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cf1f8e7-2c97-479c-a5cd-20a0f98bf6df", "record_id": "flaws_cloudtrail:0000082:9cf1f8e7-2c97-479c-a5cd-20a0f98bf6df", "row_index": 82, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cf1f8e7-2c97-479c-a5cd-20a0f98bf6df", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c447be0f-a5d0-4e6f-a6e0-8fa1cb35c71f", "record_id": "flaws_cloudtrail:0000083:c447be0f-a5d0-4e6f-a6e0-8fa1cb35c71f", "row_index": 83, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c447be0f-a5d0-4e6f-a6e0-8fa1cb35c71f", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5758bbd-6ad6-4ed6-84ae-e56543a8183e", "record_id": "flaws_cloudtrail:0000084:e5758bbd-6ad6-4ed6-84ae-e56543a8183e", "row_index": 84, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5758bbd-6ad6-4ed6-84ae-e56543a8183e", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "696d8a67-1d4e-453a-bfb8-59fc034809b71", "record_id": "flaws_cloudtrail:0000085:696d8a67-1d4e-453a-bfb8-59fc034809b71", "row_index": 85, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "696d8a67-1d4e-453a-bfb8-59fc034809b71", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47a254d4-3fc3-4dfd-8447-7d98a935bfdc", "record_id": "flaws_cloudtrail:0000086:47a254d4-3fc3-4dfd-8447-7d98a935bfdc", "row_index": 86, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47a254d4-3fc3-4dfd-8447-7d98a935bfdc", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16ef6309-f0ac-431a-96b8-c15f9b5b95b7", "record_id": "flaws_cloudtrail:0000087:16ef6309-f0ac-431a-96b8-c15f9b5b95b7", "row_index": 87, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16ef6309-f0ac-431a-96b8-c15f9b5b95b7", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f5a3a1c-f4a6-49f9-9da6-6f5b0ca8e55b", "record_id": "flaws_cloudtrail:0000088:0f5a3a1c-f4a6-49f9-9da6-6f5b0ca8e55b", "row_index": 88, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f5a3a1c-f4a6-49f9-9da6-6f5b0ca8e55b", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17d7a8cb-f900-42e9-81e0-6c70a35cf506", "record_id": "flaws_cloudtrail:0000089:17d7a8cb-f900-42e9-81e0-6c70a35cf506", "row_index": 89, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17d7a8cb-f900-42e9-81e0-6c70a35cf506", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3573cc2e-9a05-4e32-9c71-e6f6d162081a", "record_id": "flaws_cloudtrail:0000090:3573cc2e-9a05-4e32-9c71-e6f6d162081a", "row_index": 90, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3573cc2e-9a05-4e32-9c71-e6f6d162081a", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baee6526-2994-4352-abcc-66dc1f41cdd1", "record_id": "flaws_cloudtrail:0000091:baee6526-2994-4352-abcc-66dc1f41cdd1", "row_index": 91, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baee6526-2994-4352-abcc-66dc1f41cdd1", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62a2f970-2f1a-442d-abfe-6c19eae2a72f", "record_id": "flaws_cloudtrail:0000092:62a2f970-2f1a-442d-abfe-6c19eae2a72f", "row_index": 92, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62a2f970-2f1a-442d-abfe-6c19eae2a72f", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2511baa8-6cab-469a-a1df-f6110955df1a", "record_id": "flaws_cloudtrail:0000093:2511baa8-6cab-469a-a1df-f6110955df1a", "row_index": 93, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2511baa8-6cab-469a-a1df-f6110955df1a", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c1a46b9-74ab-4f09-a2ea-02969b544163", "record_id": "flaws_cloudtrail:0000094:8c1a46b9-74ab-4f09-a2ea-02969b544163", "row_index": 94, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c1a46b9-74ab-4f09-a2ea-02969b544163", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5450f1c7-a1a9-4aa9-ac42-c37f6936cb4a", "record_id": "flaws_cloudtrail:0000095:5450f1c7-a1a9-4aa9-ac42-c37f6936cb4a", "row_index": 95, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5450f1c7-a1a9-4aa9-ac42-c37f6936cb4a", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3904f594-4a93-4edb-977b-b283cede3f7b", "record_id": "flaws_cloudtrail:0000096:3904f594-4a93-4edb-977b-b283cede3f7b", "row_index": 96, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3904f594-4a93-4edb-977b-b283cede3f7b", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f289481f-4c2f-4543-8fa2-4ee8515f9256", "record_id": "flaws_cloudtrail:0000097:f289481f-4c2f-4543-8fa2-4ee8515f9256", "row_index": 97, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f289481f-4c2f-4543-8fa2-4ee8515f9256", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "666807a-acc9-4efe-9213-b684c1e5bb67", "record_id": "flaws_cloudtrail:0000098:666807a-acc9-4efe-9213-b684c1e5bb67", "row_index": 98, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "666807a-acc9-4efe-9213-b684c1e5bb67", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6144b7d-a287-425a-bd5c-076219b89ceb", "record_id": "flaws_cloudtrail:0000099:c6144b7d-a287-425a-bd5c-076219b89ceb", "row_index": 99, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6144b7d-a287-425a-bd5c-076219b89ceb", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d421152e1-bae0-484c-8b1f-2d7550485e6b", "record_id": "flaws_cloudtrail:0000100:d421152e1-bae0-484c-8b1f-2d7550485e6b", "row_index": 100, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d421152e1-bae0-484c-8b1f-2d7550485e6b", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cf1f8e7-2c97-479c-a5cd-20a0f98bf6df", "record_id": "flaws_cloudtrail:0000101:9cf1f8e7-2c97-479c-a5cd-20a0f98bf6df", "row_index": 101, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cf1f8e7-2c97-479c-a5cd-20a0f98bf6df", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c447be0f-a5d0-4e6f-a6e0-8fa1cb35c71f", "record_id": "flaws_cloudtrail:0000102:c447be0f-a5d0-4e6f-a6e0-8fa1cb35c71f", "row_index": 102, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c447be0f-a5d0-4e6f-a6e0-8fa1cb35c71f", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5758bbd-6ad6-4ed6-84ae-e56543a8183e", "record_id": "flaws_cloudtrail:0000103:e5758bbd-6ad6-4ed6-84ae-e56543a8183e", "row_index": 103, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5758bbd-6ad6-4ed6-84ae-e56543a8183e", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "696d8a67-1d4e-453a-bfb8-59fc034809b71", "record_id": "flaws_cloudtrail:0000104:696d8a67-1d4e-453a-bfb8-59fc034809b71", "row_index": 104, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "696d8a67-1d4e-453a-bfb8-59fc034809b71", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47a254d4-3fc3-4dfd-8447-7d98a935bfdc", "record_id": "flaws_cloudtrail:0000105:47a254d4-3fc3-4dfd-8447-7d98a935bfdc", "row_index": 105, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47a254d4-3fc3-4dfd-8447-7d98a935bfdc", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16ef6309-f0ac-431a-96b8-c15f9b5b95b7", "record_id": "flaws_cloudtrail:0000106:16ef6309-f0ac-431a-96b8-c15f9b5b95b7", "row_index": 106, "timestamp": "2019-07-22T17:23:40Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16ef6309-f0ac-431a-96b8-c15f9b5b95b7", "eventTime": "2019-07-22T17:23:40Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b180231f-26ac-4bd0-9e08-753ccc2e89fb", "record_id": "flaws_cloudtrail:0000107:2b180231f-26ac-4bd0-9e08-753ccc2e89fb", "row_index": 107, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b180231f-26ac-4bd0-9e08-753ccc2e89fb", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b2df089-8ba0-4c52-b1fe-29005f17c44e", "record_id": "flaws_cloudtrail:0000108:2b2df089-8ba0-4c52-b1fe-29005f17c44e", "row_index": 108, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b2df089-8ba0-4c52-b1fe-29005f17c44e", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccd60f0a-d9bd-466a-9ec7-f5a7cd2196a0", "record_id": "flaws_cloudtrail:0000109:ccd60f0a-d9bd-466a-9ec7-f5a7cd2196a0", "row_index": 109, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccd60f0a-d9bd-466a-9ec7-f5a7cd2196a0", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b03a03e8-a51a-48e3-8653-8900cce98d42", "record_id": "flaws_cloudtrail:0000110:b03a03e8-a51a-48e3-8653-8900cce98d42", "row_index": 110, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b03a03e8-a51a-48e3-8653-8900cce98d42", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63eadfb8-8318-4739-a02b-7770916adfa7", "record_id": "flaws_cloudtrail:0000111:63eadfb8-8318-4739-a02b-7770916adfa7", "row_index": 111, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63eadfb8-8318-4739-a02b-7770916adfa7", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25c0601f-8545-43fc-a728-410b0ace94fb", "record_id": "flaws_cloudtrail:0000112:25c0601f-8545-43fc-a728-410b0ace94fb", "row_index": 112, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25c0601f-8545-43fc-a728-410b0ace94fb", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fa55f04-3419-473a-8fe2-ab7d908288", "record_id": "flaws_cloudtrail:0000113:3fa55f04-3419-473a-8fe2-ab7d908288", "row_index": 113, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fa55f04-3419-473a-8fe2-ab7d908288", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27faeec4-ed68-4e4a-a8a7-25c072e4162d", "record_id": "flaws_cloudtrail:0000114:27faeec4-ed68-4e4a-a8a7-25c072e4162d", "row_index": 114, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27faeec4-ed68-4e4a-a8a7-25c072e4162d", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9781e90c-d625-4f7d-8a34-c76eb46aa005", "record_id": "flaws_cloudtrail:0000115:9781e90c-d625-4f7d-8a34-c76eb46aa005", "row_index": 115, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9781e90c-d625-4f7d-8a34-c76eb46aa005", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "206b0c95-de7a-4162-afd3-a6850f91d0bc", "record_id": "flaws_cloudtrail:0000116:206b0c95-de7a-4162-afd3-a6850f91d0bc", "row_index": 116, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "206b0c95-de7a-4162-afd3-a6850f91d0bc", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa405eb3-d855-4e62-92dd-3478b7c6b3dd", "record_id": "flaws_cloudtrail:0000117:fa405eb3-d855-4e62-92dd-3478b7c6b3dd", "row_index": 117, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa405eb3-d855-4e62-92dd-3478b7c6b3dd", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bed0953e-4d11-48e7-adb5-8f97ed6c6083", "record_id": "flaws_cloudtrail:0000118:bed0953e-4d11-48e7-adb5-8f97ed6c6083", "row_index": 118, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bed0953e-4d11-48e7-adb5-8f97ed6c6083", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b180231f-26ac-4bd0-9e08-753ccc2e89fb", "record_id": "flaws_cloudtrail:0000119:2b180231f-26ac-4bd0-9e08-753ccc2e89fb", "row_index": 119, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b180231f-26ac-4bd0-9e08-753ccc2e89fb", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b2df089-8ba0-4c52-b1fe-29005f17c44e", "record_id": "flaws_cloudtrail:0000120:2b2df089-8ba0-4c52-b1fe-29005f17c44e", "row_index": 120, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b2df089-8ba0-4c52-b1fe-29005f17c44e", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccd60f0a-d9bd-466a-9ec7-f5a7cd2196a0", "record_id": "flaws_cloudtrail:0000121:ccd60f0a-d9bd-466a-9ec7-f5a7cd2196a0", "row_index": 121, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccd60f0a-d9bd-466a-9ec7-f5a7cd2196a0", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b03a03e8-a51a-48e3-8653-8900cce98d42", "record_id": "flaws_cloudtrail:0000122:b03a03e8-a51a-48e3-8653-8900cce98d42", "row_index": 122, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b03a03e8-a51a-48e3-8653-8900cce98d42", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63eadfb8-8318-4739-a02b-7770916adfa7", "record_id": "flaws_cloudtrail:0000123:63eadfb8-8318-4739-a02b-7770916adfa7", "row_index": 123, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63eadfb8-8318-4739-a02b-7770916adfa7", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25c0601f-8545-43fc-a728-410b0ace94fb", "record_id": "flaws_cloudtrail:0000124:25c0601f-8545-43fc-a728-410b0ace94fb", "row_index": 124, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25c0601f-8545-43fc-a728-410b0ace94fb", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fa55f04-3419-473a-8fe2-ab7d908288", "record_id": "flaws_cloudtrail:0000125:3fa55f04-3419-473a-8fe2-ab7d908288", "row_index": 125, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fa55f04-3419-473a-8fe2-ab7d908288", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27faeec4-ed68-4e4a-a8a7-25c072e4162d", "record_id": "flaws_cloudtrail:0000126:27faeec4-ed68-4e4a-a8a7-25c072e4162d", "row_index": 126, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27faeec4-ed68-4e4a-a8a7-25c072e4162d", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9781e90c-d625-4f7d-8a34-c76eb46aa005", "record_id": "flaws_cloudtrail:0000127:9781e90c-d625-4f7d-8a34-c76eb46aa005", "row_index": 127, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9781e90c-d625-4f7d-8a34-c76eb46aa005", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "206b0c95-de7a-4162-afd3-a6850f91d0bc", "record_id": "flaws_cloudtrail:0000128:206b0c95-de7a-4162-afd3-a6850f91d0bc", "row_index": 128, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "206b0c95-de7a-4162-afd3-a6850f91d0bc", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa405eb3-d855-4e62-92dd-3478b7c6b3dd", "record_id": "flaws_cloudtrail:0000129:fa405eb3-d855-4e62-92dd-3478b7c6b3dd", "row_index": 129, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa405eb3-d855-4e62-92dd-3478b7c6b3dd", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bed0953e-4d11-48e7-adb5-8f97ed6c6083", "record_id": "flaws_cloudtrail:0000130:bed0953e-4d11-48e7-adb5-8f97ed6c6083", "row_index": 130, "timestamp": "2019-07-22T17:23:41Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bed0953e-4d11-48e7-adb5-8f97ed6c6083", "eventTime": "2019-07-22T17:23:41Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2dba406-f031-4973-aca7-e304ee6f64eb", "record_id": "flaws_cloudtrail:0000131:a2dba406-f031-4973-aca7-e304ee6f64eb", "row_index": 131, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2dba406-f031-4973-aca7-e304ee6f64eb", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ca2e7a9-66b8-44f2-aa13-ddd20a138e79", "record_id": "flaws_cloudtrail:0000132:7ca2e7a9-66b8-44f2-aa13-ddd20a138e79", "row_index": 132, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ca2e7a9-66b8-44f2-aa13-ddd20a138e79", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9685bb81-01c7-4aad-b3f8-ae75aadd4783", "record_id": "flaws_cloudtrail:0000133:9685bb81-01c7-4aad-b3f8-ae75aadd4783", "row_index": 133, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9685bb81-01c7-4aad-b3f8-ae75aadd4783", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e744733-8775-4399-bf2b-31089cc11242", "record_id": "flaws_cloudtrail:0000134:3e744733-8775-4399-bf2b-31089cc11242", "row_index": 134, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e744733-8775-4399-bf2b-31089cc11242", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cad7637e-65a1-4a23-af75-03d0b3fec645", "record_id": "flaws_cloudtrail:0000135:cad7637e-65a1-4a23-af75-03d0b3fec645", "row_index": 135, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cad7637e-65a1-4a23-af75-03d0b3fec645", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9a59d98-5b02-4266-8af3-dd9f330afeb3", "record_id": "flaws_cloudtrail:0000136:e9a59d98-5b02-4266-8af3-dd9f330afeb3", "row_index": 136, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9a59d98-5b02-4266-8af3-dd9f330afeb3", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65de547d-5d4d-4a5c-b67e-e8c63c05bfc4", "record_id": "flaws_cloudtrail:0000137:65de547d-5d4d-4a5c-b67e-e8c63c05bfc4", "row_index": 137, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65de547d-5d4d-4a5c-b67e-e8c63c05bfc4", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27b992ef-d0e0-4856-a468-579f59696", "record_id": "flaws_cloudtrail:0000138:27b992ef-d0e0-4856-a468-579f59696", "row_index": 138, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27b992ef-d0e0-4856-a468-579f59696", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7192a7e-bdf0-4816-81ca-c8baa6e0f8cb", "record_id": "flaws_cloudtrail:0000139:a7192a7e-bdf0-4816-81ca-c8baa6e0f8cb", "row_index": 139, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7192a7e-bdf0-4816-81ca-c8baa6e0f8cb", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a7f7f5d-8954-4ceb-87d9-7cb7c38cb214", "record_id": "flaws_cloudtrail:0000140:8a7f7f5d-8954-4ceb-87d9-7cb7c38cb214", "row_index": 140, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a7f7f5d-8954-4ceb-87d9-7cb7c38cb214", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aecbd30-3b32-4e3c-a5ec-dd13fb0f1bdb", "record_id": "flaws_cloudtrail:0000141:6aecbd30-3b32-4e3c-a5ec-dd13fb0f1bdb", "row_index": 141, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aecbd30-3b32-4e3c-a5ec-dd13fb0f1bdb", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef34acf2-7619-429c-a72b-6ef164f6d996", "record_id": "flaws_cloudtrail:0000142:ef34acf2-7619-429c-a72b-6ef164f6d996", "row_index": 142, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef34acf2-7619-429c-a72b-6ef164f6d996", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9adb528e-ba29-43ef-9b5e-053f0c0ae504", "record_id": "flaws_cloudtrail:0000143:9adb528e-ba29-43ef-9b5e-053f0c0ae504", "row_index": 143, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9adb528e-ba29-43ef-9b5e-053f0c0ae504", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5144eb95-1ae6-47aa-af60-ada0abad3232", "record_id": "flaws_cloudtrail:0000144:5144eb95-1ae6-47aa-af60-ada0abad3232", "row_index": 144, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5144eb95-1ae6-47aa-af60-ada0abad3232", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a7f3af8-e6e5-427e-bf47-b63d8664c2e5", "record_id": "flaws_cloudtrail:0000145:0a7f3af8-e6e5-427e-bf47-b63d8664c2e5", "row_index": 145, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a7f3af8-e6e5-427e-bf47-b63d8664c2e5", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf40c5f1-3a81-4e77-9e33-062691e7715", "record_id": "flaws_cloudtrail:0000146:bf40c5f1-3a81-4e77-9e33-062691e7715", "row_index": 146, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf40c5f1-3a81-4e77-9e33-062691e7715", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0fdeb76-c2b6-4d1c-a526-e931397f51bb3", "record_id": "flaws_cloudtrail:0000147:a0fdeb76-c2b6-4d1c-a526-e931397f51bb3", "row_index": 147, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0fdeb76-c2b6-4d1c-a526-e931397f51bb3", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "663e4e61-7941-48d1-a36c-0fb88ba1d1cb", "record_id": "flaws_cloudtrail:0000148:663e4e61-7941-48d1-a36c-0fb88ba1d1cb", "row_index": 148, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "663e4e61-7941-48d1-a36c-0fb88ba1d1cb", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7786f4c-08d3-4ead-974a-dda7a3d390d5", "record_id": "flaws_cloudtrail:0000149:d7786f4c-08d3-4ead-974a-dda7a3d390d5", "row_index": 149, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7786f4c-08d3-4ead-974a-dda7a3d390d5", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fa4e74e-7a53-42ac-8abe-b10ab7d4cc29", "record_id": "flaws_cloudtrail:0000150:5fa4e74e-7a53-42ac-8abe-b10ab7d4cc29", "row_index": 150, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fa4e74e-7a53-42ac-8abe-b10ab7d4cc29", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cd0bc1a-9e2d-4346-b7fc-efc88e26782a", "record_id": "flaws_cloudtrail:0000151:7cd0bc1a-9e2d-4346-b7fc-efc88e26782a", "row_index": 151, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cd0bc1a-9e2d-4346-b7fc-efc88e26782a", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a606b98-910e-421a-9f5f-83c66d973e19", "record_id": "flaws_cloudtrail:0000152:3a606b98-910e-421a-9f5f-83c66d973e19", "row_index": 152, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a606b98-910e-421a-9f5f-83c66d973e19", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "242a4134-fb81-4b85-8bef-da05c520c998", "record_id": "flaws_cloudtrail:0000153:242a4134-fb81-4b85-8bef-da05c520c998", "row_index": 153, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "242a4134-fb81-4b85-8bef-da05c520c998", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3f210f0-3c1c-42b2-8e6f-a80e24b6348e", "record_id": "flaws_cloudtrail:0000154:b3f210f0-3c1c-42b2-8e6f-a80e24b6348e", "row_index": 154, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3f210f0-3c1c-42b2-8e6f-a80e24b6348e", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3e3fc00-345d-4805-966e-3581711718df", "record_id": "flaws_cloudtrail:0000155:f3e3fc00-345d-4805-966e-3581711718df", "row_index": 155, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3e3fc00-345d-4805-966e-3581711718df", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b04bef85-7066-4061-b32a-11e8d59ba3de", "record_id": "flaws_cloudtrail:0000156:b04bef85-7066-4061-b32a-11e8d59ba3de", "row_index": 156, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b04bef85-7066-4061-b32a-11e8d59ba3de", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83a3b9b8-7a3d-472c-bf9c-2ddf79aa75e4", "record_id": "flaws_cloudtrail:0000157:83a3b9b8-7a3d-472c-bf9c-2ddf79aa75e4", "row_index": 157, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83a3b9b8-7a3d-472c-bf9c-2ddf79aa75e4", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76fe8625-5263-4f1c-8c7c-c83618551721", "record_id": "flaws_cloudtrail:0000158:76fe8625-5263-4f1c-8c7c-c83618551721", "row_index": 158, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76fe8625-5263-4f1c-8c7c-c83618551721", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee826326-456a-4494-8674-2fc083485e06", "record_id": "flaws_cloudtrail:0000159:ee826326-456a-4494-8674-2fc083485e06", "row_index": 159, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee826326-456a-4494-8674-2fc083485e06", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "311de29b-c454-410d-8d04-143ca35c93e9", "record_id": "flaws_cloudtrail:0000160:311de29b-c454-410d-8d04-143ca35c93e9", "row_index": 160, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "311de29b-c454-410d-8d04-143ca35c93e9", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa66e32f-b58d-4666-8053-0ff28e064017", "record_id": "flaws_cloudtrail:0000161:aa66e32f-b58d-4666-8053-0ff28e064017", "row_index": 161, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa66e32f-b58d-4666-8053-0ff28e064017", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ccb6db0-cb39-406f-9d9f-757c5022e759", "record_id": "flaws_cloudtrail:0000162:1ccb6db0-cb39-406f-9d9f-757c5022e759", "row_index": 162, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ccb6db0-cb39-406f-9d9f-757c5022e759", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "942a20b8-b6d1-403a-bbd2-d4f99cd3ef02", "record_id": "flaws_cloudtrail:0000163:942a20b8-b6d1-403a-bbd2-d4f99cd3ef02", "row_index": 163, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "942a20b8-b6d1-403a-bbd2-d4f99cd3ef02", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9c56008-7cfe-46ce-a691-8b5f16579f0", "record_id": "flaws_cloudtrail:0000164:e9c56008-7cfe-46ce-a691-8b5f16579f0", "row_index": 164, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9c56008-7cfe-46ce-a691-8b5f16579f0", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93b3b2c7-2b77-4ea2-bdd5-9cad357512f", "record_id": "flaws_cloudtrail:0000165:93b3b2c7-2b77-4ea2-bdd5-9cad357512f", "row_index": 165, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93b3b2c7-2b77-4ea2-bdd5-9cad357512f", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18d4cef3-a0c5-4bf4-83ea-4b3c494aef66", "record_id": "flaws_cloudtrail:0000166:18d4cef3-a0c5-4bf4-83ea-4b3c494aef66", "row_index": 166, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18d4cef3-a0c5-4bf4-83ea-4b3c494aef66", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "478d3ac3-b801-4d6f-8d43-5892b29ff8f5", "record_id": "flaws_cloudtrail:0000167:478d3ac3-b801-4d6f-8d43-5892b29ff8f5", "row_index": 167, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "478d3ac3-b801-4d6f-8d43-5892b29ff8f5", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "324592ac3-b4b8-4011-9eb2-0f60877cd929", "record_id": "flaws_cloudtrail:0000168:324592ac3-b4b8-4011-9eb2-0f60877cd929", "row_index": 168, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "324592ac3-b4b8-4011-9eb2-0f60877cd929", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bdddde5-c41e-4098-b393-cdb2dc5ef346", "record_id": "flaws_cloudtrail:0000169:4bdddde5-c41e-4098-b393-cdb2dc5ef346", "row_index": 169, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bdddde5-c41e-4098-b393-cdb2dc5ef346", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "404125cc6-6b99-4b2c-ad6f-b2658e899ac5", "record_id": "flaws_cloudtrail:0000170:404125cc6-6b99-4b2c-ad6f-b2658e899ac5", "row_index": 170, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "404125cc6-6b99-4b2c-ad6f-b2658e899ac5", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2dba406-f031-4973-aca7-e304ee6f64eb", "record_id": "flaws_cloudtrail:0000171:a2dba406-f031-4973-aca7-e304ee6f64eb", "row_index": 171, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2dba406-f031-4973-aca7-e304ee6f64eb", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ca2e7a9-66b8-44f2-aa13-ddd20a138e79", "record_id": "flaws_cloudtrail:0000172:7ca2e7a9-66b8-44f2-aa13-ddd20a138e79", "row_index": 172, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ca2e7a9-66b8-44f2-aa13-ddd20a138e79", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9685bb81-01c7-4aad-b3f8-ae75aadd4783", "record_id": "flaws_cloudtrail:0000173:9685bb81-01c7-4aad-b3f8-ae75aadd4783", "row_index": 173, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9685bb81-01c7-4aad-b3f8-ae75aadd4783", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e744733-8775-4399-bf2b-31089cc11242", "record_id": "flaws_cloudtrail:0000174:3e744733-8775-4399-bf2b-31089cc11242", "row_index": 174, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e744733-8775-4399-bf2b-31089cc11242", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cad7637e-65a1-4a23-af75-03d0b3fec645", "record_id": "flaws_cloudtrail:0000175:cad7637e-65a1-4a23-af75-03d0b3fec645", "row_index": 175, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cad7637e-65a1-4a23-af75-03d0b3fec645", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9a59d98-5b02-4266-8af3-dd9f330afeb3", "record_id": "flaws_cloudtrail:0000176:e9a59d98-5b02-4266-8af3-dd9f330afeb3", "row_index": 176, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9a59d98-5b02-4266-8af3-dd9f330afeb3", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65de547d-5d4d-4a5c-b67e-e8c63c05bfc4", "record_id": "flaws_cloudtrail:0000177:65de547d-5d4d-4a5c-b67e-e8c63c05bfc4", "row_index": 177, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65de547d-5d4d-4a5c-b67e-e8c63c05bfc4", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27b992ef-d0e0-4856-a468-579f59696", "record_id": "flaws_cloudtrail:0000178:27b992ef-d0e0-4856-a468-579f59696", "row_index": 178, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27b992ef-d0e0-4856-a468-579f59696", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7192a7e-bdf0-4816-81ca-c8baa6e0f8cb", "record_id": "flaws_cloudtrail:0000179:a7192a7e-bdf0-4816-81ca-c8baa6e0f8cb", "row_index": 179, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7192a7e-bdf0-4816-81ca-c8baa6e0f8cb", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a7f7f5d-8954-4ceb-87d9-7cb7c38cb214", "record_id": "flaws_cloudtrail:0000180:8a7f7f5d-8954-4ceb-87d9-7cb7c38cb214", "row_index": 180, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a7f7f5d-8954-4ceb-87d9-7cb7c38cb214", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aecbd30-3b32-4e3c-a5ec-dd13fb0f1bdb", "record_id": "flaws_cloudtrail:0000181:6aecbd30-3b32-4e3c-a5ec-dd13fb0f1bdb", "row_index": 181, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aecbd30-3b32-4e3c-a5ec-dd13fb0f1bdb", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef34acf2-7619-429c-a72b-6ef164f6d996", "record_id": "flaws_cloudtrail:0000182:ef34acf2-7619-429c-a72b-6ef164f6d996", "row_index": 182, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef34acf2-7619-429c-a72b-6ef164f6d996", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9adb528e-ba29-43ef-9b5e-053f0c0ae504", "record_id": "flaws_cloudtrail:0000183:9adb528e-ba29-43ef-9b5e-053f0c0ae504", "row_index": 183, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9adb528e-ba29-43ef-9b5e-053f0c0ae504", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5144eb95-1ae6-47aa-af60-ada0abad3232", "record_id": "flaws_cloudtrail:0000184:5144eb95-1ae6-47aa-af60-ada0abad3232", "row_index": 184, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5144eb95-1ae6-47aa-af60-ada0abad3232", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a7f3af8-e6e5-427e-bf47-b63d8664c2e5", "record_id": "flaws_cloudtrail:0000185:0a7f3af8-e6e5-427e-bf47-b63d8664c2e5", "row_index": 185, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a7f3af8-e6e5-427e-bf47-b63d8664c2e5", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf40c5f1-3a81-4e77-9e33-062691e7715", "record_id": "flaws_cloudtrail:0000186:bf40c5f1-3a81-4e77-9e33-062691e7715", "row_index": 186, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf40c5f1-3a81-4e77-9e33-062691e7715", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0fdeb76-c2b6-4d1c-a526-e931397f51bb3", "record_id": "flaws_cloudtrail:0000187:a0fdeb76-c2b6-4d1c-a526-e931397f51bb3", "row_index": 187, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0fdeb76-c2b6-4d1c-a526-e931397f51bb3", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "663e4e61-7941-48d1-a36c-0fb88ba1d1cb", "record_id": "flaws_cloudtrail:0000188:663e4e61-7941-48d1-a36c-0fb88ba1d1cb", "row_index": 188, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "663e4e61-7941-48d1-a36c-0fb88ba1d1cb", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7786f4c-08d3-4ead-974a-dda7a3d390d5", "record_id": "flaws_cloudtrail:0000189:d7786f4c-08d3-4ead-974a-dda7a3d390d5", "row_index": 189, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7786f4c-08d3-4ead-974a-dda7a3d390d5", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fa4e74e-7a53-42ac-8abe-b10ab7d4cc29", "record_id": "flaws_cloudtrail:0000190:5fa4e74e-7a53-42ac-8abe-b10ab7d4cc29", "row_index": 190, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fa4e74e-7a53-42ac-8abe-b10ab7d4cc29", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cd0bc1a-9e2d-4346-b7fc-efc88e26782a", "record_id": "flaws_cloudtrail:0000191:7cd0bc1a-9e2d-4346-b7fc-efc88e26782a", "row_index": 191, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cd0bc1a-9e2d-4346-b7fc-efc88e26782a", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a606b98-910e-421a-9f5f-83c66d973e19", "record_id": "flaws_cloudtrail:0000192:3a606b98-910e-421a-9f5f-83c66d973e19", "row_index": 192, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a606b98-910e-421a-9f5f-83c66d973e19", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "242a4134-fb81-4b85-8bef-da05c520c998", "record_id": "flaws_cloudtrail:0000193:242a4134-fb81-4b85-8bef-da05c520c998", "row_index": 193, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "242a4134-fb81-4b85-8bef-da05c520c998", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3f210f0-3c1c-42b2-8e6f-a80e24b6348e", "record_id": "flaws_cloudtrail:0000194:b3f210f0-3c1c-42b2-8e6f-a80e24b6348e", "row_index": 194, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3f210f0-3c1c-42b2-8e6f-a80e24b6348e", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3e3fc00-345d-4805-966e-3581711718df", "record_id": "flaws_cloudtrail:0000195:f3e3fc00-345d-4805-966e-3581711718df", "row_index": 195, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3e3fc00-345d-4805-966e-3581711718df", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b04bef85-7066-4061-b32a-11e8d59ba3de", "record_id": "flaws_cloudtrail:0000196:b04bef85-7066-4061-b32a-11e8d59ba3de", "row_index": 196, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b04bef85-7066-4061-b32a-11e8d59ba3de", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83a3b9b8-7a3d-472c-bf9c-2ddf79aa75e4", "record_id": "flaws_cloudtrail:0000197:83a3b9b8-7a3d-472c-bf9c-2ddf79aa75e4", "row_index": 197, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83a3b9b8-7a3d-472c-bf9c-2ddf79aa75e4", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76fe8625-5263-4f1c-8c7c-c83618551721", "record_id": "flaws_cloudtrail:0000198:76fe8625-5263-4f1c-8c7c-c83618551721", "row_index": 198, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76fe8625-5263-4f1c-8c7c-c83618551721", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee826326-456a-4494-8674-2fc083485e06", "record_id": "flaws_cloudtrail:0000199:ee826326-456a-4494-8674-2fc083485e06", "row_index": 199, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee826326-456a-4494-8674-2fc083485e06", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "311de29b-c454-410d-8d04-143ca35c93e9", "record_id": "flaws_cloudtrail:0000200:311de29b-c454-410d-8d04-143ca35c93e9", "row_index": 200, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "311de29b-c454-410d-8d04-143ca35c93e9", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa66e32f-b58d-4666-8053-0ff28e064017", "record_id": "flaws_cloudtrail:0000201:aa66e32f-b58d-4666-8053-0ff28e064017", "row_index": 201, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa66e32f-b58d-4666-8053-0ff28e064017", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ccb6db0-cb39-406f-9d9f-757c5022e759", "record_id": "flaws_cloudtrail:0000202:1ccb6db0-cb39-406f-9d9f-757c5022e759", "row_index": 202, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ccb6db0-cb39-406f-9d9f-757c5022e759", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "942a20b8-b6d1-403a-bbd2-d4f99cd3ef02", "record_id": "flaws_cloudtrail:0000203:942a20b8-b6d1-403a-bbd2-d4f99cd3ef02", "row_index": 203, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "942a20b8-b6d1-403a-bbd2-d4f99cd3ef02", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9c56008-7cfe-46ce-a691-8b5f16579f0", "record_id": "flaws_cloudtrail:0000204:e9c56008-7cfe-46ce-a691-8b5f16579f0", "row_index": 204, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9c56008-7cfe-46ce-a691-8b5f16579f0", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93b3b2c7-2b77-4ea2-bdd5-9cad357512f", "record_id": "flaws_cloudtrail:0000205:93b3b2c7-2b77-4ea2-bdd5-9cad357512f", "row_index": 205, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93b3b2c7-2b77-4ea2-bdd5-9cad357512f", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18d4cef3-a0c5-4bf4-83ea-4b3c494aef66", "record_id": "flaws_cloudtrail:0000206:18d4cef3-a0c5-4bf4-83ea-4b3c494aef66", "row_index": 206, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18d4cef3-a0c5-4bf4-83ea-4b3c494aef66", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "478d3ac3-b801-4d6f-8d43-5892b29ff8f5", "record_id": "flaws_cloudtrail:0000207:478d3ac3-b801-4d6f-8d43-5892b29ff8f5", "row_index": 207, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "478d3ac3-b801-4d6f-8d43-5892b29ff8f5", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "324592ac3-b4b8-4011-9eb2-0f60877cd929", "record_id": "flaws_cloudtrail:0000208:324592ac3-b4b8-4011-9eb2-0f60877cd929", "row_index": 208, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "324592ac3-b4b8-4011-9eb2-0f60877cd929", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bdddde5-c41e-4098-b393-cdb2dc5ef346", "record_id": "flaws_cloudtrail:0000209:4bdddde5-c41e-4098-b393-cdb2dc5ef346", "row_index": 209, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bdddde5-c41e-4098-b393-cdb2dc5ef346", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "404125cc6-6b99-4b2c-ad6f-b2658e899ac5", "record_id": "flaws_cloudtrail:0000210:404125cc6-6b99-4b2c-ad6f-b2658e899ac5", "row_index": 210, "timestamp": "2019-07-22T17:23:42Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "404125cc6-6b99-4b2c-ad6f-b2658e899ac5", "eventTime": "2019-07-22T17:23:42Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d3ccd09-90de-4d86-a39b-b48447e06924", "record_id": "flaws_cloudtrail:0000211:6d3ccd09-90de-4d86-a39b-b48447e06924", "row_index": 211, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d3ccd09-90de-4d86-a39b-b48447e06924", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d7270c9-f761-48a9-bdaf-162bec8154be", "record_id": "flaws_cloudtrail:0000212:1d7270c9-f761-48a9-bdaf-162bec8154be", "row_index": 212, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d7270c9-f761-48a9-bdaf-162bec8154be", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f06daecc-195b-40a6-9d8a-5c6915b3a2da", "record_id": "flaws_cloudtrail:0000213:f06daecc-195b-40a6-9d8a-5c6915b3a2da", "row_index": 213, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f06daecc-195b-40a6-9d8a-5c6915b3a2da", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fda5fe69-8057-456a-a74e-344e73257c88", "record_id": "flaws_cloudtrail:0000214:fda5fe69-8057-456a-a74e-344e73257c88", "row_index": 214, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fda5fe69-8057-456a-a74e-344e73257c88", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4d78e4a-1899-4aab-9953-539adf0c9724", "record_id": "flaws_cloudtrail:0000215:c4d78e4a-1899-4aab-9953-539adf0c9724", "row_index": 215, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4d78e4a-1899-4aab-9953-539adf0c9724", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad0b5959-2217-483c-9cba-d701fb6a91ac", "record_id": "flaws_cloudtrail:0000216:ad0b5959-2217-483c-9cba-d701fb6a91ac", "row_index": 216, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad0b5959-2217-483c-9cba-d701fb6a91ac", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f02690b-7fac-4398-ac55-8aacd1b30c8c", "record_id": "flaws_cloudtrail:0000217:7f02690b-7fac-4398-ac55-8aacd1b30c8c", "row_index": 217, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f02690b-7fac-4398-ac55-8aacd1b30c8c", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea20f92f-e01a-4530-a00e-ad23c229079b", "record_id": "flaws_cloudtrail:0000218:ea20f92f-e01a-4530-a00e-ad23c229079b", "row_index": 218, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea20f92f-e01a-4530-a00e-ad23c229079b", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "180427-3224-4d56-9842-5d0db657a9d7", "record_id": "flaws_cloudtrail:0000219:180427-3224-4d56-9842-5d0db657a9d7", "row_index": 219, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "180427-3224-4d56-9842-5d0db657a9d7", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19102bee-d1f2-4297-b540-0e3aabf1d498", "record_id": "flaws_cloudtrail:0000220:19102bee-d1f2-4297-b540-0e3aabf1d498", "row_index": 220, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19102bee-d1f2-4297-b540-0e3aabf1d498", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d3ccd09-90de-4d86-a39b-b48447e06924", "record_id": "flaws_cloudtrail:0000221:6d3ccd09-90de-4d86-a39b-b48447e06924", "row_index": 221, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d3ccd09-90de-4d86-a39b-b48447e06924", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d7270c9-f761-48a9-bdaf-162bec8154be", "record_id": "flaws_cloudtrail:0000222:1d7270c9-f761-48a9-bdaf-162bec8154be", "row_index": 222, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d7270c9-f761-48a9-bdaf-162bec8154be", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f06daecc-195b-40a6-9d8a-5c6915b3a2da", "record_id": "flaws_cloudtrail:0000223:f06daecc-195b-40a6-9d8a-5c6915b3a2da", "row_index": 223, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f06daecc-195b-40a6-9d8a-5c6915b3a2da", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fda5fe69-8057-456a-a74e-344e73257c88", "record_id": "flaws_cloudtrail:0000224:fda5fe69-8057-456a-a74e-344e73257c88", "row_index": 224, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fda5fe69-8057-456a-a74e-344e73257c88", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4d78e4a-1899-4aab-9953-539adf0c9724", "record_id": "flaws_cloudtrail:0000225:c4d78e4a-1899-4aab-9953-539adf0c9724", "row_index": 225, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4d78e4a-1899-4aab-9953-539adf0c9724", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad0b5959-2217-483c-9cba-d701fb6a91ac", "record_id": "flaws_cloudtrail:0000226:ad0b5959-2217-483c-9cba-d701fb6a91ac", "row_index": 226, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad0b5959-2217-483c-9cba-d701fb6a91ac", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f02690b-7fac-4398-ac55-8aacd1b30c8c", "record_id": "flaws_cloudtrail:0000227:7f02690b-7fac-4398-ac55-8aacd1b30c8c", "row_index": 227, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f02690b-7fac-4398-ac55-8aacd1b30c8c", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea20f92f-e01a-4530-a00e-ad23c229079b", "record_id": "flaws_cloudtrail:0000228:ea20f92f-e01a-4530-a00e-ad23c229079b", "row_index": 228, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea20f92f-e01a-4530-a00e-ad23c229079b", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "180427-3224-4d56-9842-5d0db657a9d7", "record_id": "flaws_cloudtrail:0000229:180427-3224-4d56-9842-5d0db657a9d7", "row_index": 229, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "180427-3224-4d56-9842-5d0db657a9d7", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19102bee-d1f2-4297-b540-0e3aabf1d498", "record_id": "flaws_cloudtrail:0000230:19102bee-d1f2-4297-b540-0e3aabf1d498", "row_index": 230, "timestamp": "2019-07-22T17:23:43Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19102bee-d1f2-4297-b540-0e3aabf1d498", "eventTime": "2019-07-22T17:23:43Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99fb43ba-8977-4748-ad27-84929c54ecd", "record_id": "flaws_cloudtrail:0000231:99fb43ba-8977-4748-ad27-84929c54ecd", "row_index": 231, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99fb43ba-8977-4748-ad27-84929c54ecd", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "640e5543-9f8d-427e-aeb5-0c7dff12d84d", "record_id": "flaws_cloudtrail:0000232:640e5543-9f8d-427e-aeb5-0c7dff12d84d", "row_index": 232, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "640e5543-9f8d-427e-aeb5-0c7dff12d84d", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7eb80ed-8efe-4e02-a079-0032db0ea6cc", "record_id": "flaws_cloudtrail:0000233:e7eb80ed-8efe-4e02-a079-0032db0ea6cc", "row_index": 233, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7eb80ed-8efe-4e02-a079-0032db0ea6cc", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abee36f8-d146-4a21-8ce4-df52e03fdb32", "record_id": "flaws_cloudtrail:0000234:abee36f8-d146-4a21-8ce4-df52e03fdb32", "row_index": 234, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abee36f8-d146-4a21-8ce4-df52e03fdb32", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "550b27d1-cb57-449b-8d9e-e30f92b4cfc4", "record_id": "flaws_cloudtrail:0000235:550b27d1-cb57-449b-8d9e-e30f92b4cfc4", "row_index": 235, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "550b27d1-cb57-449b-8d9e-e30f92b4cfc4", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff6ed559-ab9c-4f5f-8214-ea3eaa42f677", "record_id": "flaws_cloudtrail:0000236:ff6ed559-ab9c-4f5f-8214-ea3eaa42f677", "row_index": 236, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff6ed559-ab9c-4f5f-8214-ea3eaa42f677", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1754f7b-48db-46f9-8c5f-dbac5fe65da9", "record_id": "flaws_cloudtrail:0000237:c1754f7b-48db-46f9-8c5f-dbac5fe65da9", "row_index": 237, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1754f7b-48db-46f9-8c5f-dbac5fe65da9", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bed315f-47c3-494b-844e-bd42ba2493dd", "record_id": "flaws_cloudtrail:0000238:4bed315f-47c3-494b-844e-bd42ba2493dd", "row_index": 238, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bed315f-47c3-494b-844e-bd42ba2493dd", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "677dc310-35a2-4b6e-9589-92bccada39d0", "record_id": "flaws_cloudtrail:0000239:677dc310-35a2-4b6e-9589-92bccada39d0", "row_index": 239, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "677dc310-35a2-4b6e-9589-92bccada39d0", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd688aba-9b58-41a2-a335-87953dc9a7c4", "record_id": "flaws_cloudtrail:0000240:cd688aba-9b58-41a2-a335-87953dc9a7c4", "row_index": 240, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd688aba-9b58-41a2-a335-87953dc9a7c4", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03bd1ba2-82c1-4a02-9045-3f385e19f559", "record_id": "flaws_cloudtrail:0000241:03bd1ba2-82c1-4a02-9045-3f385e19f559", "row_index": 241, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03bd1ba2-82c1-4a02-9045-3f385e19f559", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0afaf7d-a37b-4686-9747-e98af723e99a", "record_id": "flaws_cloudtrail:0000242:f0afaf7d-a37b-4686-9747-e98af723e99a", "row_index": 242, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0afaf7d-a37b-4686-9747-e98af723e99a", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b86cb1d-b24f-4d71-91d5-d26e853cf3f5", "record_id": "flaws_cloudtrail:0000243:6b86cb1d-b24f-4d71-91d5-d26e853cf3f5", "row_index": 243, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b86cb1d-b24f-4d71-91d5-d26e853cf3f5", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a37dd91-5534-4d38-84ea-9a30877429fb", "record_id": "flaws_cloudtrail:0000244:3a37dd91-5534-4d38-84ea-9a30877429fb", "row_index": 244, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a37dd91-5534-4d38-84ea-9a30877429fb", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1657bfe-6010-4b1e-9cd4-9528bbd853242", "record_id": "flaws_cloudtrail:0000245:c1657bfe-6010-4b1e-9cd4-9528bbd853242", "row_index": 245, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1657bfe-6010-4b1e-9cd4-9528bbd853242", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9217cdc-060f-4a50-8799-673b8c145224", "record_id": "flaws_cloudtrail:0000246:b9217cdc-060f-4a50-8799-673b8c145224", "row_index": 246, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9217cdc-060f-4a50-8799-673b8c145224", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99fb43ba-8977-4748-ad27-84929c54ecd", "record_id": "flaws_cloudtrail:0000247:99fb43ba-8977-4748-ad27-84929c54ecd", "row_index": 247, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99fb43ba-8977-4748-ad27-84929c54ecd", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "640e5543-9f8d-427e-aeb5-0c7dff12d84d", "record_id": "flaws_cloudtrail:0000248:640e5543-9f8d-427e-aeb5-0c7dff12d84d", "row_index": 248, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "640e5543-9f8d-427e-aeb5-0c7dff12d84d", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7eb80ed-8efe-4e02-a079-0032db0ea6cc", "record_id": "flaws_cloudtrail:0000249:e7eb80ed-8efe-4e02-a079-0032db0ea6cc", "row_index": 249, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7eb80ed-8efe-4e02-a079-0032db0ea6cc", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abee36f8-d146-4a21-8ce4-df52e03fdb32", "record_id": "flaws_cloudtrail:0000250:abee36f8-d146-4a21-8ce4-df52e03fdb32", "row_index": 250, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abee36f8-d146-4a21-8ce4-df52e03fdb32", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "550b27d1-cb57-449b-8d9e-e30f92b4cfc4", "record_id": "flaws_cloudtrail:0000251:550b27d1-cb57-449b-8d9e-e30f92b4cfc4", "row_index": 251, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "550b27d1-cb57-449b-8d9e-e30f92b4cfc4", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff6ed559-ab9c-4f5f-8214-ea3eaa42f677", "record_id": "flaws_cloudtrail:0000252:ff6ed559-ab9c-4f5f-8214-ea3eaa42f677", "row_index": 252, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff6ed559-ab9c-4f5f-8214-ea3eaa42f677", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1754f7b-48db-46f9-8c5f-dbac5fe65da9", "record_id": "flaws_cloudtrail:0000253:c1754f7b-48db-46f9-8c5f-dbac5fe65da9", "row_index": 253, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1754f7b-48db-46f9-8c5f-dbac5fe65da9", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bed315f-47c3-494b-844e-bd42ba2493dd", "record_id": "flaws_cloudtrail:0000254:4bed315f-47c3-494b-844e-bd42ba2493dd", "row_index": 254, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bed315f-47c3-494b-844e-bd42ba2493dd", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "677dc310-35a2-4b6e-9589-92bccada39d0", "record_id": "flaws_cloudtrail:0000255:677dc310-35a2-4b6e-9589-92bccada39d0", "row_index": 255, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "677dc310-35a2-4b6e-9589-92bccada39d0", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd688aba-9b58-41a2-a335-87953dc9a7c4", "record_id": "flaws_cloudtrail:0000256:cd688aba-9b58-41a2-a335-87953dc9a7c4", "row_index": 256, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd688aba-9b58-41a2-a335-87953dc9a7c4", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03bd1ba2-82c1-4a02-9045-3f385e19f559", "record_id": "flaws_cloudtrail:0000257:03bd1ba2-82c1-4a02-9045-3f385e19f559", "row_index": 257, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03bd1ba2-82c1-4a02-9045-3f385e19f559", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0afaf7d-a37b-4686-9747-e98af723e99a", "record_id": "flaws_cloudtrail:0000258:f0afaf7d-a37b-4686-9747-e98af723e99a", "row_index": 258, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0afaf7d-a37b-4686-9747-e98af723e99a", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b86cb1d-b24f-4d71-91d5-d26e853cf3f5", "record_id": "flaws_cloudtrail:0000259:6b86cb1d-b24f-4d71-91d5-d26e853cf3f5", "row_index": 259, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b86cb1d-b24f-4d71-91d5-d26e853cf3f5", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a37dd91-5534-4d38-84ea-9a30877429fb", "record_id": "flaws_cloudtrail:0000260:3a37dd91-5534-4d38-84ea-9a30877429fb", "row_index": 260, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a37dd91-5534-4d38-84ea-9a30877429fb", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1657bfe-6010-4b1e-9cd4-9528bbd853242", "record_id": "flaws_cloudtrail:0000261:c1657bfe-6010-4b1e-9cd4-9528bbd853242", "row_index": 261, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1657bfe-6010-4b1e-9cd4-9528bbd853242", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9217cdc-060f-4a50-8799-673b8c145224", "record_id": "flaws_cloudtrail:0000262:b9217cdc-060f-4a50-8799-673b8c145224", "row_index": 262, "timestamp": "2019-07-22T17:23:44Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9217cdc-060f-4a50-8799-673b8c145224", "eventTime": "2019-07-22T17:23:44Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5967e12-b855-4e62-a9ed-bcd1e6751e67", "record_id": "flaws_cloudtrail:0000263:e5967e12-b855-4e62-a9ed-bcd1e6751e67", "row_index": 263, "timestamp": "2019-07-22T17:23:45Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5967e12-b855-4e62-a9ed-bcd1e6751e67", "eventTime": "2019-07-22T17:23:45Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3eece67-8675-49b8-9f3c-3ff5faf36783", "record_id": "flaws_cloudtrail:0000264:e3eece67-8675-49b8-9f3c-3ff5faf36783", "row_index": 264, "timestamp": "2019-07-22T17:23:45Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3eece67-8675-49b8-9f3c-3ff5faf36783", "eventTime": "2019-07-22T17:23:45Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21488-c2e0-4667-885f-6368d0ae09c5", "record_id": "flaws_cloudtrail:0000265:21488-c2e0-4667-885f-6368d0ae09c5", "row_index": 265, "timestamp": "2019-07-22T17:23:45Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21488-c2e0-4667-885f-6368d0ae09c5", "eventTime": "2019-07-22T17:23:45Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7744d427-7097-48f4-8ef7-0704fa0d9af8", "record_id": "flaws_cloudtrail:0000266:7744d427-7097-48f4-8ef7-0704fa0d9af8", "row_index": 266, "timestamp": "2019-07-22T17:23:45Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7744d427-7097-48f4-8ef7-0704fa0d9af8", "eventTime": "2019-07-22T17:23:45Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6085e028-1ad6-45d2-aaed-7acb0badd5cb", "record_id": "flaws_cloudtrail:0000267:6085e028-1ad6-45d2-aaed-7acb0badd5cb", "row_index": 267, "timestamp": "2019-07-22T17:23:45Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6085e028-1ad6-45d2-aaed-7acb0badd5cb", "eventTime": "2019-07-22T17:23:45Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9005e68-81f9-4a69-8058-8df904d1c71a", "record_id": "flaws_cloudtrail:0000268:e9005e68-81f9-4a69-8058-8df904d1c71a", "row_index": 268, "timestamp": "2019-07-22T17:23:45Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9005e68-81f9-4a69-8058-8df904d1c71a", "eventTime": "2019-07-22T17:23:45Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cb45ce5-f0ef-47dc-9597-58cb90074d2a", "record_id": "flaws_cloudtrail:0000269:6cb45ce5-f0ef-47dc-9597-58cb90074d2a", "row_index": 269, "timestamp": "2019-07-22T17:23:45Z", "event_type": "DescribeInstanceAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cb45ce5-f0ef-47dc-9597-58cb90074d2a", "eventTime": "2019-07-22T17:23:45Z", "eventName": "DescribeInstanceAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instanceId": "i-aa2d3b42e5c6e801a", "attribute": "userData"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62b756987-3ac3-4eb3-b934-5e9a5f29548", "record_id": "flaws_cloudtrail:0000270:62b756987-3ac3-4eb3-b934-5e9a5f29548", "row_index": 270, "timestamp": "2019-07-22T17:23:45Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62b756987-3ac3-4eb3-b934-5e9a5f29548", "eventTime": "2019-07-22T17:23:45Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5967e12-b855-4e62-a9ed-bcd1e6751e67", "record_id": "flaws_cloudtrail:0000271:e5967e12-b855-4e62-a9ed-bcd1e6751e67", "row_index": 271, "timestamp": "2019-07-22T17:23:45Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5967e12-b855-4e62-a9ed-bcd1e6751e67", "eventTime": "2019-07-22T17:23:45Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3eece67-8675-49b8-9f3c-3ff5faf36783", "record_id": "flaws_cloudtrail:0000272:e3eece67-8675-49b8-9f3c-3ff5faf36783", "row_index": 272, "timestamp": "2019-07-22T17:23:45Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3eece67-8675-49b8-9f3c-3ff5faf36783", "eventTime": "2019-07-22T17:23:45Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21488-c2e0-4667-885f-6368d0ae09c5", "record_id": "flaws_cloudtrail:0000273:21488-c2e0-4667-885f-6368d0ae09c5", "row_index": 273, "timestamp": "2019-07-22T17:23:45Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21488-c2e0-4667-885f-6368d0ae09c5", "eventTime": "2019-07-22T17:23:45Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7744d427-7097-48f4-8ef7-0704fa0d9af8", "record_id": "flaws_cloudtrail:0000274:7744d427-7097-48f4-8ef7-0704fa0d9af8", "row_index": 274, "timestamp": "2019-07-22T17:23:45Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7744d427-7097-48f4-8ef7-0704fa0d9af8", "eventTime": "2019-07-22T17:23:45Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6085e028-1ad6-45d2-aaed-7acb0badd5cb", "record_id": "flaws_cloudtrail:0000275:6085e028-1ad6-45d2-aaed-7acb0badd5cb", "row_index": 275, "timestamp": "2019-07-22T17:23:45Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6085e028-1ad6-45d2-aaed-7acb0badd5cb", "eventTime": "2019-07-22T17:23:45Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9005e68-81f9-4a69-8058-8df904d1c71a", "record_id": "flaws_cloudtrail:0000276:e9005e68-81f9-4a69-8058-8df904d1c71a", "row_index": 276, "timestamp": "2019-07-22T17:23:45Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9005e68-81f9-4a69-8058-8df904d1c71a", "eventTime": "2019-07-22T17:23:45Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cb45ce5-f0ef-47dc-9597-58cb90074d2a", "record_id": "flaws_cloudtrail:0000277:6cb45ce5-f0ef-47dc-9597-58cb90074d2a", "row_index": 277, "timestamp": "2019-07-22T17:23:45Z", "event_type": "DescribeInstanceAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cb45ce5-f0ef-47dc-9597-58cb90074d2a", "eventTime": "2019-07-22T17:23:45Z", "eventName": "DescribeInstanceAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instanceId": "i-aa2d3b42e5c6e801a", "attribute": "userData"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62b756987-3ac3-4eb3-b934-5e9a5f29548", "record_id": "flaws_cloudtrail:0000278:62b756987-3ac3-4eb3-b934-5e9a5f29548", "row_index": 278, "timestamp": "2019-07-22T17:23:45Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62b756987-3ac3-4eb3-b934-5e9a5f29548", "eventTime": "2019-07-22T17:23:45Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47ff09e6-8f70-4458-8bd5-a7c0f99e6b8f", "record_id": "flaws_cloudtrail:0000279:47ff09e6-8f70-4458-8bd5-a7c0f99e6b8f", "row_index": 279, "timestamp": "2019-07-22T17:27:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.130.252.27", "user_agent": "aws-cli/1.16.199 Python/3.6.8 Linux/4.18.0-80.4.2.el8_0.x86_64 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47ff09e6-8f70-4458-8bd5-a7c0f99e6b8f", "eventTime": "2019-07-22T17:27:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.130.252.27", "userAgent": "aws-cli/1.16.199 Python/3.6.8 Linux/4.18.0-80.4.2.el8_0.x86_64 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47ff09e6-8f70-4458-8bd5-a7c0f99e6b8f", "record_id": "flaws_cloudtrail:0000280:47ff09e6-8f70-4458-8bd5-a7c0f99e6b8f", "row_index": 280, "timestamp": "2019-07-22T17:27:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.130.252.27", "user_agent": "aws-cli/1.16.199 Python/3.6.8 Linux/4.18.0-80.4.2.el8_0.x86_64 botocore/1.12.189", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47ff09e6-8f70-4458-8bd5-a7c0f99e6b8f", "eventTime": "2019-07-22T17:27:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.130.252.27", "userAgent": "aws-cli/1.16.199 Python/3.6.8 Linux/4.18.0-80.4.2.el8_0.x86_64 botocore/1.12.189", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e88310-5c05-4e55-b0f5-7216f24c8561", "record_id": "flaws_cloudtrail:0000281:e88310-5c05-4e55-b0f5-7216f24c8561", "row_index": 281, "timestamp": "2019-07-22T17:28:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.130.252.27", "user_agent": "aws-cli/1.16.199 Python/3.6.8 Linux/4.18.0-80.4.2.el8_0.x86_64 botocore/1.12.189", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e88310-5c05-4e55-b0f5-7216f24c8561", "eventTime": "2019-07-22T17:28:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.130.252.27", "userAgent": "aws-cli/1.16.199 Python/3.6.8 Linux/4.18.0-80.4.2.el8_0.x86_64 botocore/1.12.189", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e88310-5c05-4e55-b0f5-7216f24c8561", "record_id": "flaws_cloudtrail:0000282:e88310-5c05-4e55-b0f5-7216f24c8561", "row_index": 282, "timestamp": "2019-07-22T17:28:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.130.252.27", "user_agent": "aws-cli/1.16.199 Python/3.6.8 Linux/4.18.0-80.4.2.el8_0.x86_64 botocore/1.12.189", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e88310-5c05-4e55-b0f5-7216f24c8561", "eventTime": "2019-07-22T17:28:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.130.252.27", "userAgent": "aws-cli/1.16.199 Python/3.6.8 Linux/4.18.0-80.4.2.el8_0.x86_64 botocore/1.12.189", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52f05bd0-90b5-4d69-8583-e2b1e10e2518", "record_id": "flaws_cloudtrail:0000283:52f05bd0-90b5-4d69-8583-e2b1e10e2518", "row_index": 283, "timestamp": "2019-07-22T17:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52f05bd0-90b5-4d69-8583-e2b1e10e2518", "eventTime": "2019-07-22T17:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQQQ1MCVFGHC709ZO", "expiration": "Jul 22, 2019 11:41:04 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52f05bd0-90b5-4d69-8583-e2b1e10e2518", "record_id": "flaws_cloudtrail:0000284:52f05bd0-90b5-4d69-8583-e2b1e10e2518", "row_index": 284, "timestamp": "2019-07-22T17:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52f05bd0-90b5-4d69-8583-e2b1e10e2518", "eventTime": "2019-07-22T17:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQQQ1MCVFGHC709ZO", "expiration": "Jul 22, 2019 11:41:04 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d179bba0-9777-4d11-aed2-da975992eeb0e", "record_id": "flaws_cloudtrail:0000285:d179bba0-9777-4d11-aed2-da975992eeb0e", "row_index": 285, "timestamp": "2019-07-22T18:04:01Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d179bba0-9777-4d11-aed2-da975992eeb0e", "eventTime": "2019-07-22T18:04:01Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d179bba0-9777-4d11-aed2-da975992eeb0e", "record_id": "flaws_cloudtrail:0000286:d179bba0-9777-4d11-aed2-da975992eeb0e", "row_index": 286, "timestamp": "2019-07-22T18:04:01Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d179bba0-9777-4d11-aed2-da975992eeb0e", "eventTime": "2019-07-22T18:04:01Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8416a595-36aa-4ee0-9894-9a1a4eb7be87", "record_id": "flaws_cloudtrail:0000287:8416a595-36aa-4ee0-9894-9a1a4eb7be87", "row_index": 287, "timestamp": "2019-07-22T18:04:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8416a595-36aa-4ee0-9894-9a1a4eb7be87", "eventTime": "2019-07-22T18:04:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8416a595-36aa-4ee0-9894-9a1a4eb7be87", "record_id": "flaws_cloudtrail:0000288:8416a595-36aa-4ee0-9894-9a1a4eb7be87", "row_index": 288, "timestamp": "2019-07-22T18:04:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8416a595-36aa-4ee0-9894-9a1a4eb7be87", "eventTime": "2019-07-22T18:04:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b10632-cb38-4fb8-971d-47d88afebd5e", "record_id": "flaws_cloudtrail:0000289:0b10632-cb38-4fb8-971d-47d88afebd5e", "row_index": 289, "timestamp": "2019-07-22T18:04:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b10632-cb38-4fb8-971d-47d88afebd5e", "eventTime": "2019-07-22T18:04:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b10632-cb38-4fb8-971d-47d88afebd5e", "record_id": "flaws_cloudtrail:0000290:0b10632-cb38-4fb8-971d-47d88afebd5e", "row_index": 290, "timestamp": "2019-07-22T18:04:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b10632-cb38-4fb8-971d-47d88afebd5e", "eventTime": "2019-07-22T18:04:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93ab1139-f46a-4099-abb1-26dfd3c3ed86", "record_id": "flaws_cloudtrail:0000291:93ab1139-f46a-4099-abb1-26dfd3c3ed86", "row_index": 291, "timestamp": "2019-07-22T18:05:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93ab1139-f46a-4099-abb1-26dfd3c3ed86", "eventTime": "2019-07-22T18:05:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93ab1139-f46a-4099-abb1-26dfd3c3ed86", "record_id": "flaws_cloudtrail:0000292:93ab1139-f46a-4099-abb1-26dfd3c3ed86", "row_index": 292, "timestamp": "2019-07-22T18:05:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93ab1139-f46a-4099-abb1-26dfd3c3ed86", "eventTime": "2019-07-22T18:05:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02f8b301-134b-4d31-b10f-d21bd7204b78", "record_id": "flaws_cloudtrail:0000293:02f8b301-134b-4d31-b10f-d21bd7204b78", "row_index": 293, "timestamp": "2019-07-22T18:08:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02f8b301-134b-4d31-b10f-d21bd7204b78", "eventTime": "2019-07-22T18:08:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02f8b301-134b-4d31-b10f-d21bd7204b78", "record_id": "flaws_cloudtrail:0000294:02f8b301-134b-4d31-b10f-d21bd7204b78", "row_index": 294, "timestamp": "2019-07-22T18:08:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02f8b301-134b-4d31-b10f-d21bd7204b78", "eventTime": "2019-07-22T18:08:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93aef8df-525d-4e8a-8b16-edaae0ef0e36", "record_id": "flaws_cloudtrail:0000295:93aef8df-525d-4e8a-8b16-edaae0ef0e36", "row_index": 295, "timestamp": "2019-07-22T18:19:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93aef8df-525d-4e8a-8b16-edaae0ef0e36", "eventTime": "2019-07-22T18:19:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93aef8df-525d-4e8a-8b16-edaae0ef0e36", "record_id": "flaws_cloudtrail:0000296:93aef8df-525d-4e8a-8b16-edaae0ef0e36", "row_index": 296, "timestamp": "2019-07-22T18:19:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93aef8df-525d-4e8a-8b16-edaae0ef0e36", "eventTime": "2019-07-22T18:19:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89bbe7aa-27ec-4db9-897e-fa6b852eadcd", "record_id": "flaws_cloudtrail:0000297:89bbe7aa-27ec-4db9-897e-fa6b852eadcd", "row_index": 297, "timestamp": "2019-07-22T18:21:24Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89bbe7aa-27ec-4db9-897e-fa6b852eadcd", "eventTime": "2019-07-22T18:21:24Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}, {"owner": "amazon"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89bbe7aa-27ec-4db9-897e-fa6b852eadcd", "record_id": "flaws_cloudtrail:0000298:89bbe7aa-27ec-4db9-897e-fa6b852eadcd", "row_index": 298, "timestamp": "2019-07-22T18:21:24Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89bbe7aa-27ec-4db9-897e-fa6b852eadcd", "eventTime": "2019-07-22T18:21:24Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}, {"owner": "amazon"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f96a74a-22a8-4a3b-b3cc-04a15e69b24e", "record_id": "flaws_cloudtrail:0000299:8f96a74a-22a8-4a3b-b3cc-04a15e69b24e", "row_index": 299, "timestamp": "2019-07-22T18:22:42Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1934, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f96a74a-22a8-4a3b-b3cc-04a15e69b24e", "eventTime": "2019-07-22T18:22:42Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3SC1310CLAELD01E", "expiration": "Jul 22, 2019 7:22:42 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f96a74a-22a8-4a3b-b3cc-04a15e69b24e", "record_id": "flaws_cloudtrail:0000300:8f96a74a-22a8-4a3b-b3cc-04a15e69b24e", "row_index": 300, "timestamp": "2019-07-22T18:22:42Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1934, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f96a74a-22a8-4a3b-b3cc-04a15e69b24e", "eventTime": "2019-07-22T18:22:42Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3SC1310CLAELD01E", "expiration": "Jul 22, 2019 7:22:42 PM", "sessionToken": "AgoJb3JpZ2luX2VjEFsaCXVzLXdlc3QtMiJHMEUCIQCt7e+suZBxvYi0tIfDKz5REpyp6dtfIUb48g/MfqKABAIgfQLVoqlYfBSy1Rt7jT+1nTcO7EGfvsg2yQ6WDw88oLcq8QIIxP//////////ARAAGgw5NzU0MjYyNjIwMjkiDPtMnGwyULHItBIJGyrFAkKeBwakP1NXV/N4l8P2LdZZB8mxcwD1f2JAOwHYs6jLDjQZd+4ixK1rGUX1NzK4glVnArzB5WdSdsoaEt6Bo5gK3Ogno3aWPPXOjX1POTGaODRWYyPDfWm9K8LeVUuUulmSw2qlKMm+5ExzqZR3FmS2Vt6NjbDhl2M8Ky8skFKwmWXmD+zQoTgguO46tbQ+I9CcchhYWOitW5g6A/LDG/w8doJAC3DmaBoHuLi+ggajatJlO/APnLmTZWA6tYqM/G0bPyDTxyJEAgzj65zHjTFo7c4ZYLAXQ9zhaFYYgHEt7zGEVVxaly98QzF9UFm3RZg8bYnnBrmu7g9FDOZl4u/tFKWJsHS1whNRtnh2BctvV9I8nHDYLpE1lzDX3svoWGFyFgKCYONLP8E5rxRq6/k0N6cYjUyiPzziWZf6LSrNR6uyaBww8v3X6QU6tAGikBZuRODimlXF1E/0dIvms0Pfj57l8V6saAo4gwIMKIP1lNd+9KPIdLvWyh7HPS//eLpeAJeg2wOH0a9yChkqu6cpD/PaGgnfqmwNjLD/PzkJxjcWb8AXutjpFlG6p/SaQUYgQVYcIcaftY3Y8ixzMmz8nM/9KTp7m0A/iXJEJtZnThWJD0Gm4li7X9FfAn/5FuVIufxCEizSqYRDsUdbfPv3g0D6A+iSYWItCHKKN9+R/7E="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7039ce02-fdf9-43a9-aaab-bc8aa99b45e7", "record_id": "flaws_cloudtrail:0000301:7039ce02-fdf9-43a9-aaab-bc8aa99b45e7", "row_index": 301, "timestamp": "2019-07-22T18:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7039ce02-fdf9-43a9-aaab-bc8aa99b45e7", "eventTime": "2019-07-22T18:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9A4EFAPCCKVC34N2", "expiration": "Jul 23, 2019 1:03:54 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7039ce02-fdf9-43a9-aaab-bc8aa99b45e7", "record_id": "flaws_cloudtrail:0000302:7039ce02-fdf9-43a9-aaab-bc8aa99b45e7", "row_index": 302, "timestamp": "2019-07-22T18:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7039ce02-fdf9-43a9-aaab-bc8aa99b45e7", "eventTime": "2019-07-22T18:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9A4EFAPCCKVC34N2", "expiration": "Jul 23, 2019 1:03:54 AM", "sessionToken": "AgoJb3JpZ2luX2VjEFsaCXVzLXdlc3QtMiJIMEYCIQDVHRCcjIVXGO7zFFaZvp6R8yyHv+oyt6mee4PiHsZo+gIhAMrYKHLsk06EK1/Chx2bcVZ8oe05LOWbknyB/TINMFDaKuMDCMT//////////wEQABoMOTc1NDI2MjYyMDI5Igwfp4ZaEylHCV5e9H8qtwMpgHGrLJX2hgebteQQhJ1BXMUyArslPSJoR4rF+vFEzaYjOgV+RGTaY8x8kyjyRdq/uTh+Isylp59Eak8lcL1EQA3tbxVe8VtdYD3oYsaTBsVRtSwkGC2itTcWaHatkDhg+bkRbb6Kf5jXfGKRCENJxxdq+FP9UCUonSyHIUwYUsc0pdTtcH8VvY/tkPnl3+z0yeCnGM628u87c030PG7lTulix0pcP0VSjY3fDnfurtKJwEtHv+cFI6MbrFxsgLw83sadrrS7j0kq9mM4YGrGQi83DEO3lkOfKBwR+GSCPFHSxumBVGUw09TMln+MczPuG4iWM40d+GpIMAXDdqxMjZ8c75cbnBLTDBnqT7SRx5RbrnSa61CvriRwHbTReoUacF62dVGbp8KXpyUDlcZWF2Wy96E38b9+l58uMZMKGk24rTsZEjFtFBvYkKcqFELczdGlMc4xqo3U6cXeudZpv5GrMq/sd/4iuBVgllV0ZQWhlzv2XlD6MoylG/lBWbZdbyV/3A89OCvF2oqpuKXlu1vDoS8U9Fj0WXldOH+wjONHkjklPTnw0Mtz0SNDhV1zfj+EMlmsMPqB2OkFOrMBBDR60rPkjQ08SEvFq5alSDoLKORZUQw35jUbGB238QUuDdAneFHcND0aYcqIzxDsN/pNi+jCOFUA2FLdUcXa7GMxi6n1KWNAG+WEe6kb+hIQKx+5idFH9Li4TWtWdXcwDCjupYqt6A6+uZYoDo+eMX9+Nnqq2ggQk9hmxepVRSi8TvifMswHM65VUR8YknRTV9Yey3+Grw9+EJHW1+8RP1fWNkZIQWeIzfou1WGruU6Y0vc="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab651d10-8e99-4caa-9e04-88fafc2f3694", "record_id": "flaws_cloudtrail:0000303:ab651d10-8e99-4caa-9e04-88fafc2f3694", "row_index": 303, "timestamp": "2019-07-22T19:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab651d10-8e99-4caa-9e04-88fafc2f3694", "eventTime": "2019-07-22T19:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIADA0NWGAQHDI9JE0P", "expiration": "Jul 23, 2019 1:55:18 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab651d10-8e99-4caa-9e04-88fafc2f3694", "record_id": "flaws_cloudtrail:0000304:ab651d10-8e99-4caa-9e04-88fafc2f3694", "row_index": 304, "timestamp": "2019-07-22T19:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab651d10-8e99-4caa-9e04-88fafc2f3694", "eventTime": "2019-07-22T19:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIADA0NWGAQHDI9JE0P", "expiration": "Jul 23, 2019 1:55:18 AM", "sessionToken": "AgoJb3JpZ2luX2VjEFwaCXVzLXdlc3QtMiJHMEUCIQCmrfTygpVfy/aRsSt9Akbcyo9gnGAW4xDUaOH3/2mCpAIgFroeH1Z4n35dmNn/xtPXdX6QwdaUxaeVq1O+od6YTG8q4wMIxf//////////ARAAGgw5NzU0MjYyNjIwMjkiDCx3zSKXD37LaelfWyq3A3rsHR4RrngXAtoyhvp1RAZVnf8wDbFRCfgaCCxXwBHTZW9HcAGxuMwJ1YQnHQ93EIEyDLGeSPu21jxo5zcALzTBlYl0kpIpTW5IuBafwdhhsGXazsN3+0syMzAIkkiF5SZd1QCPFgeAQMm1rhhI0dA8XgBGdz0iuinNW8kGZ9ffRhAVgqMfmEpXpQPoJsy3ie7u+hLEKzN+tnde0q5V6EQKA0nwYULw3a3KdtG6a5aGrwSs/f64HQuz55DXLPojXac91vTOthQXaihwCTqT/dbo935Jzs+istHTwzz9kCCTMFGgE/k442fWI9F0dubzr0rmIC935Y3od/k+nFM2nxb+hrEiugOHRIpf3enwh5RHcYlnvqI31n16rZYK4l3K2Xw4z/NM/GVHYaG1k8AhPttz0AbAa0kKOAIXcj86kCqwZb1VHxmy8U9Kz2rNaNs3T8d/CZ14Urpn+BITYTCKW+3pPdiHkpvUn+c4lpLI7bwO5FogBFk61n0DtSqU37iFnPCSOeN/rUhNWN6s+5u3CmXWVNuChFDi2nMMjd4hsyfE9L9uzND/pW3uT7J5QdIK7mAN4tNHmnMwip7Y6QU6tAFCFaDDDzPcRJNcuDmrtwOqRWufz8gG+KUxLh56X3ZDBl6KrHQltySytSc39TQKqQByOmCd0krvAdkvRq71EsApYvHK3VmcMCJKJ0WG81Xd+BPsR30m4MhIzIOB5zXNJn5jb1LCuQFCUHRAiNc+7Wec5TSM98LOsqqWs1fOkQzJmxKWEK9LSd+R1EcogqeDh/opKlYSGmfvUvwfgvga5KbZnU4pq3VCqzgOQGi5fEO7E8AoCIM="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f8a409e-dde6-4f46-a9f9-82db3be1e9c6", "record_id": "flaws_cloudtrail:0000305:5f8a409e-dde6-4f46-a9f9-82db3be1e9c6", "row_index": 305, "timestamp": "2019-07-22T20:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1884, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f8a409e-dde6-4f46-a9f9-82db3be1e9c6", "eventTime": "2019-07-22T20:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5R7RMJE00G2RIONT", "expiration": "Jul 23, 2019 2:33:58 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f8a409e-dde6-4f46-a9f9-82db3be1e9c6", "record_id": "flaws_cloudtrail:0000306:5f8a409e-dde6-4f46-a9f9-82db3be1e9c6", "row_index": 306, "timestamp": "2019-07-22T20:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1884, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f8a409e-dde6-4f46-a9f9-82db3be1e9c6", "eventTime": "2019-07-22T20:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5R7RMJE00G2RIONT", "expiration": "Jul 23, 2019 2:33:58 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c65ab84-2132-45d0-b462-5f6f48b032c6", "record_id": "flaws_cloudtrail:0000307:4c65ab84-2132-45d0-b462-5f6f48b032c6", "row_index": 307, "timestamp": "2019-07-22T20:31:47Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c65ab84-2132-45d0-b462-5f6f48b032c6", "eventTime": "2019-07-22T20:31:47Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c65ab84-2132-45d0-b462-5f6f48b032c6", "record_id": "flaws_cloudtrail:0000308:4c65ab84-2132-45d0-b462-5f6f48b032c6", "row_index": 308, "timestamp": "2019-07-22T20:31:47Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c65ab84-2132-45d0-b462-5f6f48b032c6", "eventTime": "2019-07-22T20:31:47Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfc88d97-4ee9-4672-9fda-e9a35fe4ea34", "record_id": "flaws_cloudtrail:0000309:cfc88d97-4ee9-4672-9fda-e9a35fe4ea34", "row_index": 309, "timestamp": "2019-07-22T20:32:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfc88d97-4ee9-4672-9fda-e9a35fe4ea34", "eventTime": "2019-07-22T20:32:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfc88d97-4ee9-4672-9fda-e9a35fe4ea34", "record_id": "flaws_cloudtrail:0000310:cfc88d97-4ee9-4672-9fda-e9a35fe4ea34", "row_index": 310, "timestamp": "2019-07-22T20:32:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfc88d97-4ee9-4672-9fda-e9a35fe4ea34", "eventTime": "2019-07-22T20:32:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "354cb30d-38f0-48ba-bb1a-ff498af72cd2", "record_id": "flaws_cloudtrail:0000311:354cb30d-38f0-48ba-bb1a-ff498af72cd2", "row_index": 311, "timestamp": "2019-07-22T20:57:31Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.44.251.182", "user_agent": "[aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.193]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "354cb30d-38f0-48ba-bb1a-ff498af72cd2", "eventTime": "2019-07-22T20:57:31Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.44.251.182", "userAgent": "[aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.193]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "354cb30d-38f0-48ba-bb1a-ff498af72cd2", "record_id": "flaws_cloudtrail:0000312:354cb30d-38f0-48ba-bb1a-ff498af72cd2", "row_index": 312, "timestamp": "2019-07-22T20:57:31Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.44.251.182", "user_agent": "[aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.193]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "354cb30d-38f0-48ba-bb1a-ff498af72cd2", "eventTime": "2019-07-22T20:57:31Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.44.251.182", "userAgent": "[aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.193]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4534d00e-e1ad-4a30-8e46-b83c46e035398", "record_id": "flaws_cloudtrail:0000313:4534d00e-e1ad-4a30-8e46-b83c46e035398", "row_index": 313, "timestamp": "2019-07-22T21:00:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4534d00e-e1ad-4a30-8e46-b83c46e035398", "eventTime": "2019-07-22T21:00:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4534d00e-e1ad-4a30-8e46-b83c46e035398", "record_id": "flaws_cloudtrail:0000314:4534d00e-e1ad-4a30-8e46-b83c46e035398", "row_index": 314, "timestamp": "2019-07-22T21:00:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4534d00e-e1ad-4a30-8e46-b83c46e035398", "eventTime": "2019-07-22T21:00:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8881c04a-fda0-46d6-abe1-c4759cc91038", "record_id": "flaws_cloudtrail:0000315:8881c04a-fda0-46d6-abe1-c4759cc91038", "row_index": 315, "timestamp": "2019-07-22T21:01:56Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8881c04a-fda0-46d6-abe1-c4759cc91038", "eventTime": "2019-07-22T21:01:56Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8881c04a-fda0-46d6-abe1-c4759cc91038", "record_id": "flaws_cloudtrail:0000316:8881c04a-fda0-46d6-abe1-c4759cc91038", "row_index": 316, "timestamp": "2019-07-22T21:01:56Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8881c04a-fda0-46d6-abe1-c4759cc91038", "eventTime": "2019-07-22T21:01:56Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e417b99-86f9-45a5-838c-40dd1efd5601", "record_id": "flaws_cloudtrail:0000317:4e417b99-86f9-45a5-838c-40dd1efd5601", "row_index": 317, "timestamp": "2019-07-22T21:02:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e417b99-86f9-45a5-838c-40dd1efd5601", "eventTime": "2019-07-22T21:02:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e417b99-86f9-45a5-838c-40dd1efd5601", "record_id": "flaws_cloudtrail:0000318:4e417b99-86f9-45a5-838c-40dd1efd5601", "row_index": 318, "timestamp": "2019-07-22T21:02:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e417b99-86f9-45a5-838c-40dd1efd5601", "eventTime": "2019-07-22T21:02:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b53c9b1-9c01-46b8-9c61-05f0c3e1057f", "record_id": "flaws_cloudtrail:0000319:6b53c9b1-9c01-46b8-9c61-05f0c3e1057f", "row_index": 319, "timestamp": "2019-07-22T21:08:07Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b53c9b1-9c01-46b8-9c61-05f0c3e1057f", "eventTime": "2019-07-22T21:08:07Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b53c9b1-9c01-46b8-9c61-05f0c3e1057f", "record_id": "flaws_cloudtrail:0000320:6b53c9b1-9c01-46b8-9c61-05f0c3e1057f", "row_index": 320, "timestamp": "2019-07-22T21:08:07Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b53c9b1-9c01-46b8-9c61-05f0c3e1057f", "eventTime": "2019-07-22T21:08:07Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b647f59a-cbf0-4bad-819f-cf1e0ab7c09a", "record_id": "flaws_cloudtrail:0000321:b647f59a-cbf0-4bad-819f-cf1e0ab7c09a", "row_index": 321, "timestamp": "2019-07-22T21:08:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b647f59a-cbf0-4bad-819f-cf1e0ab7c09a", "eventTime": "2019-07-22T21:08:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b647f59a-cbf0-4bad-819f-cf1e0ab7c09a", "record_id": "flaws_cloudtrail:0000322:b647f59a-cbf0-4bad-819f-cf1e0ab7c09a", "row_index": 322, "timestamp": "2019-07-22T21:08:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b647f59a-cbf0-4bad-819f-cf1e0ab7c09a", "eventTime": "2019-07-22T21:08:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fe700a8-a382-4f11-bc21-2e9a03c269b6", "record_id": "flaws_cloudtrail:0000323:2fe700a8-a382-4f11-bc21-2e9a03c269b6", "row_index": 323, "timestamp": "2019-07-22T21:08:09Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fe700a8-a382-4f11-bc21-2e9a03c269b6", "eventTime": "2019-07-22T21:08:09Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fe700a8-a382-4f11-bc21-2e9a03c269b6", "record_id": "flaws_cloudtrail:0000324:2fe700a8-a382-4f11-bc21-2e9a03c269b6", "row_index": 324, "timestamp": "2019-07-22T21:08:09Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fe700a8-a382-4f11-bc21-2e9a03c269b6", "eventTime": "2019-07-22T21:08:09Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e39bdf3-4cb5-475b-a0b7-17b3cedd9327", "record_id": "flaws_cloudtrail:0000325:5e39bdf3-4cb5-475b-a0b7-17b3cedd9327", "row_index": 325, "timestamp": "2019-07-22T21:08:11Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e39bdf3-4cb5-475b-a0b7-17b3cedd9327", "eventTime": "2019-07-22T21:08:11Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e39bdf3-4cb5-475b-a0b7-17b3cedd9327", "record_id": "flaws_cloudtrail:0000326:5e39bdf3-4cb5-475b-a0b7-17b3cedd9327", "row_index": 326, "timestamp": "2019-07-22T21:08:11Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e39bdf3-4cb5-475b-a0b7-17b3cedd9327", "eventTime": "2019-07-22T21:08:11Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e36441-c8ed-40d6-a435-d9dd5ac1c443", "record_id": "flaws_cloudtrail:0000327:6e36441-c8ed-40d6-a435-d9dd5ac1c443", "row_index": 327, "timestamp": "2019-07-22T21:08:13Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e36441-c8ed-40d6-a435-d9dd5ac1c443", "eventTime": "2019-07-22T21:08:13Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e36441-c8ed-40d6-a435-d9dd5ac1c443", "record_id": "flaws_cloudtrail:0000328:6e36441-c8ed-40d6-a435-d9dd5ac1c443", "row_index": 328, "timestamp": "2019-07-22T21:08:13Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e36441-c8ed-40d6-a435-d9dd5ac1c443", "eventTime": "2019-07-22T21:08:13Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a51cdc3a-4988-426c-bc16-7297fd68061", "record_id": "flaws_cloudtrail:0000329:a51cdc3a-4988-426c-bc16-7297fd68061", "row_index": 329, "timestamp": "2019-07-22T21:08:15Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a51cdc3a-4988-426c-bc16-7297fd68061", "eventTime": "2019-07-22T21:08:15Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a51cdc3a-4988-426c-bc16-7297fd68061", "record_id": "flaws_cloudtrail:0000330:a51cdc3a-4988-426c-bc16-7297fd68061", "row_index": 330, "timestamp": "2019-07-22T21:08:15Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a51cdc3a-4988-426c-bc16-7297fd68061", "eventTime": "2019-07-22T21:08:15Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42c35aec-539b-42d9-a7f8-635a72c0e5ad", "record_id": "flaws_cloudtrail:0000331:42c35aec-539b-42d9-a7f8-635a72c0e5ad", "row_index": 331, "timestamp": "2019-07-22T21:08:17Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42c35aec-539b-42d9-a7f8-635a72c0e5ad", "eventTime": "2019-07-22T21:08:17Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42c35aec-539b-42d9-a7f8-635a72c0e5ad", "record_id": "flaws_cloudtrail:0000332:42c35aec-539b-42d9-a7f8-635a72c0e5ad", "row_index": 332, "timestamp": "2019-07-22T21:08:17Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42c35aec-539b-42d9-a7f8-635a72c0e5ad", "eventTime": "2019-07-22T21:08:17Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "651c9b7e-c4a2-4aaf-8ea0-4e1491f623de", "record_id": "flaws_cloudtrail:0000333:651c9b7e-c4a2-4aaf-8ea0-4e1491f623de", "row_index": 333, "timestamp": "2019-07-22T21:08:19Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "651c9b7e-c4a2-4aaf-8ea0-4e1491f623de", "eventTime": "2019-07-22T21:08:19Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "651c9b7e-c4a2-4aaf-8ea0-4e1491f623de", "record_id": "flaws_cloudtrail:0000334:651c9b7e-c4a2-4aaf-8ea0-4e1491f623de", "row_index": 334, "timestamp": "2019-07-22T21:08:19Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "651c9b7e-c4a2-4aaf-8ea0-4e1491f623de", "eventTime": "2019-07-22T21:08:19Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "047d6fda-b6f4-4060-9857-75a6492a6aa3", "record_id": "flaws_cloudtrail:0000335:047d6fda-b6f4-4060-9857-75a6492a6aa3", "row_index": 335, "timestamp": "2019-07-22T21:08:21Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "047d6fda-b6f4-4060-9857-75a6492a6aa3", "eventTime": "2019-07-22T21:08:21Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "047d6fda-b6f4-4060-9857-75a6492a6aa3", "record_id": "flaws_cloudtrail:0000336:047d6fda-b6f4-4060-9857-75a6492a6aa3", "row_index": 336, "timestamp": "2019-07-22T21:08:21Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "047d6fda-b6f4-4060-9857-75a6492a6aa3", "eventTime": "2019-07-22T21:08:21Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb7904b2-4506-4c73-becd-a82507334c3d", "record_id": "flaws_cloudtrail:0000337:fb7904b2-4506-4c73-becd-a82507334c3d", "row_index": 337, "timestamp": "2019-07-22T21:08:26Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb7904b2-4506-4c73-becd-a82507334c3d", "eventTime": "2019-07-22T21:08:26Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb7904b2-4506-4c73-becd-a82507334c3d", "record_id": "flaws_cloudtrail:0000338:fb7904b2-4506-4c73-becd-a82507334c3d", "row_index": 338, "timestamp": "2019-07-22T21:08:26Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb7904b2-4506-4c73-becd-a82507334c3d", "eventTime": "2019-07-22T21:08:26Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "805de4a5-72ef-4294-9b0a-e4656f5d3ede", "record_id": "flaws_cloudtrail:0000339:805de4a5-72ef-4294-9b0a-e4656f5d3ede", "row_index": 339, "timestamp": "2019-07-22T21:08:28Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "805de4a5-72ef-4294-9b0a-e4656f5d3ede", "eventTime": "2019-07-22T21:08:28Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "805de4a5-72ef-4294-9b0a-e4656f5d3ede", "record_id": "flaws_cloudtrail:0000340:805de4a5-72ef-4294-9b0a-e4656f5d3ede", "row_index": 340, "timestamp": "2019-07-22T21:08:28Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "805de4a5-72ef-4294-9b0a-e4656f5d3ede", "eventTime": "2019-07-22T21:08:28Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "186cdf70-99bc-490f-8c0f-624df515b9b7", "record_id": "flaws_cloudtrail:0000341:186cdf70-99bc-490f-8c0f-624df515b9b7", "row_index": 341, "timestamp": "2019-07-22T21:08:30Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "186cdf70-99bc-490f-8c0f-624df515b9b7", "eventTime": "2019-07-22T21:08:30Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "186cdf70-99bc-490f-8c0f-624df515b9b7", "record_id": "flaws_cloudtrail:0000342:186cdf70-99bc-490f-8c0f-624df515b9b7", "row_index": 342, "timestamp": "2019-07-22T21:08:30Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "186cdf70-99bc-490f-8c0f-624df515b9b7", "eventTime": "2019-07-22T21:08:30Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02f9aa59-557b-4722-b05b-53a0646cc45f", "record_id": "flaws_cloudtrail:0000343:02f9aa59-557b-4722-b05b-53a0646cc45f", "row_index": 343, "timestamp": "2019-07-22T21:08:32Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02f9aa59-557b-4722-b05b-53a0646cc45f", "eventTime": "2019-07-22T21:08:32Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02f9aa59-557b-4722-b05b-53a0646cc45f", "record_id": "flaws_cloudtrail:0000344:02f9aa59-557b-4722-b05b-53a0646cc45f", "row_index": 344, "timestamp": "2019-07-22T21:08:32Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02f9aa59-557b-4722-b05b-53a0646cc45f", "eventTime": "2019-07-22T21:08:32Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4243e1ab-d144-4a40-a0b3-eebc372abe26", "record_id": "flaws_cloudtrail:0000345:4243e1ab-d144-4a40-a0b3-eebc372abe26", "row_index": 345, "timestamp": "2019-07-22T21:09:25Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4243e1ab-d144-4a40-a0b3-eebc372abe26", "eventTime": "2019-07-22T21:09:25Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4243e1ab-d144-4a40-a0b3-eebc372abe26", "record_id": "flaws_cloudtrail:0000346:4243e1ab-d144-4a40-a0b3-eebc372abe26", "row_index": 346, "timestamp": "2019-07-22T21:09:25Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4243e1ab-d144-4a40-a0b3-eebc372abe26", "eventTime": "2019-07-22T21:09:25Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c205a61b-193f-4e4d-9797-3969dd13d905", "record_id": "flaws_cloudtrail:0000347:c205a61b-193f-4e4d-9797-3969dd13d905", "row_index": 347, "timestamp": "2019-07-22T21:11:03Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c205a61b-193f-4e4d-9797-3969dd13d905", "eventTime": "2019-07-22T21:11:03Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c205a61b-193f-4e4d-9797-3969dd13d905", "record_id": "flaws_cloudtrail:0000348:c205a61b-193f-4e4d-9797-3969dd13d905", "row_index": 348, "timestamp": "2019-07-22T21:11:03Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c205a61b-193f-4e4d-9797-3969dd13d905", "eventTime": "2019-07-22T21:11:03Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b02e35df-c916-42f5-ba73-613ec63935a", "record_id": "flaws_cloudtrail:0000349:b02e35df-c916-42f5-ba73-613ec63935a", "row_index": 349, "timestamp": "2019-07-22T21:12:43Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b02e35df-c916-42f5-ba73-613ec63935a", "eventTime": "2019-07-22T21:12:43Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b02e35df-c916-42f5-ba73-613ec63935a", "record_id": "flaws_cloudtrail:0000350:b02e35df-c916-42f5-ba73-613ec63935a", "row_index": 350, "timestamp": "2019-07-22T21:12:43Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b02e35df-c916-42f5-ba73-613ec63935a", "eventTime": "2019-07-22T21:12:43Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "035bb5ff-820a-491d-bbdf-4061646e3741", "record_id": "flaws_cloudtrail:0000351:035bb5ff-820a-491d-bbdf-4061646e3741", "row_index": 351, "timestamp": "2019-07-22T21:12:44Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "035bb5ff-820a-491d-bbdf-4061646e3741", "eventTime": "2019-07-22T21:12:44Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "035bb5ff-820a-491d-bbdf-4061646e3741", "record_id": "flaws_cloudtrail:0000352:035bb5ff-820a-491d-bbdf-4061646e3741", "row_index": 352, "timestamp": "2019-07-22T21:12:44Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "035bb5ff-820a-491d-bbdf-4061646e3741", "eventTime": "2019-07-22T21:12:44Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fd4e73c-5c1e-4b89-9e9e-679d7739aedb", "record_id": "flaws_cloudtrail:0000353:0fd4e73c-5c1e-4b89-9e9e-679d7739aedb", "row_index": 353, "timestamp": "2019-07-22T21:12:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fd4e73c-5c1e-4b89-9e9e-679d7739aedb", "eventTime": "2019-07-22T21:12:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fd4e73c-5c1e-4b89-9e9e-679d7739aedb", "record_id": "flaws_cloudtrail:0000354:0fd4e73c-5c1e-4b89-9e9e-679d7739aedb", "row_index": 354, "timestamp": "2019-07-22T21:12:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fd4e73c-5c1e-4b89-9e9e-679d7739aedb", "eventTime": "2019-07-22T21:12:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfee9e74-7725-489c-976a-0ad5855a99bd", "record_id": "flaws_cloudtrail:0000355:dfee9e74-7725-489c-976a-0ad5855a99bd", "row_index": 355, "timestamp": "2019-07-22T21:12:47Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfee9e74-7725-489c-976a-0ad5855a99bd", "eventTime": "2019-07-22T21:12:47Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfee9e74-7725-489c-976a-0ad5855a99bd", "record_id": "flaws_cloudtrail:0000356:dfee9e74-7725-489c-976a-0ad5855a99bd", "row_index": 356, "timestamp": "2019-07-22T21:12:47Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfee9e74-7725-489c-976a-0ad5855a99bd", "eventTime": "2019-07-22T21:12:47Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae79b0e8-b899-4401-a2d0-d8c259c5d71f", "record_id": "flaws_cloudtrail:0000357:ae79b0e8-b899-4401-a2d0-d8c259c5d71f", "row_index": 357, "timestamp": "2019-07-22T21:12:50Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae79b0e8-b899-4401-a2d0-d8c259c5d71f", "eventTime": "2019-07-22T21:12:50Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae79b0e8-b899-4401-a2d0-d8c259c5d71f", "record_id": "flaws_cloudtrail:0000358:ae79b0e8-b899-4401-a2d0-d8c259c5d71f", "row_index": 358, "timestamp": "2019-07-22T21:12:50Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae79b0e8-b899-4401-a2d0-d8c259c5d71f", "eventTime": "2019-07-22T21:12:50Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a288356-a30e-455d-9861-e14161a05", "record_id": "flaws_cloudtrail:0000359:a288356-a30e-455d-9861-e14161a05", "row_index": 359, "timestamp": "2019-07-22T21:12:52Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a288356-a30e-455d-9861-e14161a05", "eventTime": "2019-07-22T21:12:52Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a288356-a30e-455d-9861-e14161a05", "record_id": "flaws_cloudtrail:0000360:a288356-a30e-455d-9861-e14161a05", "row_index": 360, "timestamp": "2019-07-22T21:12:52Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a288356-a30e-455d-9861-e14161a05", "eventTime": "2019-07-22T21:12:52Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fa51287-4b6e-4e33-b0c1-292350e990", "record_id": "flaws_cloudtrail:0000361:9fa51287-4b6e-4e33-b0c1-292350e990", "row_index": 361, "timestamp": "2019-07-22T21:12:55Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fa51287-4b6e-4e33-b0c1-292350e990", "eventTime": "2019-07-22T21:12:55Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fa51287-4b6e-4e33-b0c1-292350e990", "record_id": "flaws_cloudtrail:0000362:9fa51287-4b6e-4e33-b0c1-292350e990", "row_index": 362, "timestamp": "2019-07-22T21:12:55Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fa51287-4b6e-4e33-b0c1-292350e990", "eventTime": "2019-07-22T21:12:55Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6440bbb9-b57c-4664-8048-32fcd9e453ea", "record_id": "flaws_cloudtrail:0000363:6440bbb9-b57c-4664-8048-32fcd9e453ea", "row_index": 363, "timestamp": "2019-07-22T21:12:58Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6440bbb9-b57c-4664-8048-32fcd9e453ea", "eventTime": "2019-07-22T21:12:58Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6440bbb9-b57c-4664-8048-32fcd9e453ea", "record_id": "flaws_cloudtrail:0000364:6440bbb9-b57c-4664-8048-32fcd9e453ea", "row_index": 364, "timestamp": "2019-07-22T21:12:58Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6440bbb9-b57c-4664-8048-32fcd9e453ea", "eventTime": "2019-07-22T21:12:58Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2544ae5-0f45-495a-97e5-d95f1abfc2cd", "record_id": "flaws_cloudtrail:0000365:d2544ae5-0f45-495a-97e5-d95f1abfc2cd", "row_index": 365, "timestamp": "2019-07-22T21:13:03Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2544ae5-0f45-495a-97e5-d95f1abfc2cd", "eventTime": "2019-07-22T21:13:03Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2544ae5-0f45-495a-97e5-d95f1abfc2cd", "record_id": "flaws_cloudtrail:0000366:d2544ae5-0f45-495a-97e5-d95f1abfc2cd", "row_index": 366, "timestamp": "2019-07-22T21:13:03Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2544ae5-0f45-495a-97e5-d95f1abfc2cd", "eventTime": "2019-07-22T21:13:03Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c998787f6-421d-46be-a380-32616da3b8d", "record_id": "flaws_cloudtrail:0000367:c998787f6-421d-46be-a380-32616da3b8d", "row_index": 367, "timestamp": "2019-07-22T21:13:06Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c998787f6-421d-46be-a380-32616da3b8d", "eventTime": "2019-07-22T21:13:06Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c998787f6-421d-46be-a380-32616da3b8d", "record_id": "flaws_cloudtrail:0000368:c998787f6-421d-46be-a380-32616da3b8d", "row_index": 368, "timestamp": "2019-07-22T21:13:06Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c998787f6-421d-46be-a380-32616da3b8d", "eventTime": "2019-07-22T21:13:06Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f85c30a7-a5fb-4c01-a7cd-bf7686363fb4", "record_id": "flaws_cloudtrail:0000369:f85c30a7-a5fb-4c01-a7cd-bf7686363fb4", "row_index": 369, "timestamp": "2019-07-22T21:13:09Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f85c30a7-a5fb-4c01-a7cd-bf7686363fb4", "eventTime": "2019-07-22T21:13:09Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f85c30a7-a5fb-4c01-a7cd-bf7686363fb4", "record_id": "flaws_cloudtrail:0000370:f85c30a7-a5fb-4c01-a7cd-bf7686363fb4", "row_index": 370, "timestamp": "2019-07-22T21:13:09Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f85c30a7-a5fb-4c01-a7cd-bf7686363fb4", "eventTime": "2019-07-22T21:13:09Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "865bf709-3b50-4589-81b7-4803f5cbdb84", "record_id": "flaws_cloudtrail:0000371:865bf709-3b50-4589-81b7-4803f5cbdb84", "row_index": 371, "timestamp": "2019-07-22T21:13:13Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "865bf709-3b50-4589-81b7-4803f5cbdb84", "eventTime": "2019-07-22T21:13:13Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "865bf709-3b50-4589-81b7-4803f5cbdb84", "record_id": "flaws_cloudtrail:0000372:865bf709-3b50-4589-81b7-4803f5cbdb84", "row_index": 372, "timestamp": "2019-07-22T21:13:13Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "865bf709-3b50-4589-81b7-4803f5cbdb84", "eventTime": "2019-07-22T21:13:13Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "481614a3a-7859-4677-86ef-6891215b637d", "record_id": "flaws_cloudtrail:0000373:481614a3a-7859-4677-86ef-6891215b637d", "row_index": 373, "timestamp": "2019-07-22T21:13:15Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "481614a3a-7859-4677-86ef-6891215b637d", "eventTime": "2019-07-22T21:13:15Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "481614a3a-7859-4677-86ef-6891215b637d", "record_id": "flaws_cloudtrail:0000374:481614a3a-7859-4677-86ef-6891215b637d", "row_index": 374, "timestamp": "2019-07-22T21:13:15Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "481614a3a-7859-4677-86ef-6891215b637d", "eventTime": "2019-07-22T21:13:15Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "269545f42-d002-4970-ae9d-2fe0f5867fc8", "record_id": "flaws_cloudtrail:0000375:269545f42-d002-4970-ae9d-2fe0f5867fc8", "row_index": 375, "timestamp": "2019-07-22T21:13:17Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "269545f42-d002-4970-ae9d-2fe0f5867fc8", "eventTime": "2019-07-22T21:13:17Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "269545f42-d002-4970-ae9d-2fe0f5867fc8", "record_id": "flaws_cloudtrail:0000376:269545f42-d002-4970-ae9d-2fe0f5867fc8", "row_index": 376, "timestamp": "2019-07-22T21:13:17Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "269545f42-d002-4970-ae9d-2fe0f5867fc8", "eventTime": "2019-07-22T21:13:17Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f639992-99d0-4edc-ac5e-6658b90ecf6d", "record_id": "flaws_cloudtrail:0000377:f639992-99d0-4edc-ac5e-6658b90ecf6d", "row_index": 377, "timestamp": "2019-07-22T21:13:20Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f639992-99d0-4edc-ac5e-6658b90ecf6d", "eventTime": "2019-07-22T21:13:20Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f639992-99d0-4edc-ac5e-6658b90ecf6d", "record_id": "flaws_cloudtrail:0000378:f639992-99d0-4edc-ac5e-6658b90ecf6d", "row_index": 378, "timestamp": "2019-07-22T21:13:20Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f639992-99d0-4edc-ac5e-6658b90ecf6d", "eventTime": "2019-07-22T21:13:20Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90a5fbf6-e3b9-4000-975b-516f092825fe", "record_id": "flaws_cloudtrail:0000379:90a5fbf6-e3b9-4000-975b-516f092825fe", "row_index": 379, "timestamp": "2019-07-22T21:13:24Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90a5fbf6-e3b9-4000-975b-516f092825fe", "eventTime": "2019-07-22T21:13:24Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90a5fbf6-e3b9-4000-975b-516f092825fe", "record_id": "flaws_cloudtrail:0000380:90a5fbf6-e3b9-4000-975b-516f092825fe", "row_index": 380, "timestamp": "2019-07-22T21:13:24Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90a5fbf6-e3b9-4000-975b-516f092825fe", "eventTime": "2019-07-22T21:13:24Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41851ea-6428-447e-8027-e3dd5dd6e01f", "record_id": "flaws_cloudtrail:0000381:41851ea-6428-447e-8027-e3dd5dd6e01f", "row_index": 381, "timestamp": "2019-07-22T21:13:26Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41851ea-6428-447e-8027-e3dd5dd6e01f", "eventTime": "2019-07-22T21:13:26Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41851ea-6428-447e-8027-e3dd5dd6e01f", "record_id": "flaws_cloudtrail:0000382:41851ea-6428-447e-8027-e3dd5dd6e01f", "row_index": 382, "timestamp": "2019-07-22T21:13:26Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41851ea-6428-447e-8027-e3dd5dd6e01f", "eventTime": "2019-07-22T21:13:26Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eec38d49-7cbe-4599-9152-7e555924c93", "record_id": "flaws_cloudtrail:0000383:eec38d49-7cbe-4599-9152-7e555924c93", "row_index": 383, "timestamp": "2019-07-22T21:13:29Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eec38d49-7cbe-4599-9152-7e555924c93", "eventTime": "2019-07-22T21:13:29Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eec38d49-7cbe-4599-9152-7e555924c93", "record_id": "flaws_cloudtrail:0000384:eec38d49-7cbe-4599-9152-7e555924c93", "row_index": 384, "timestamp": "2019-07-22T21:13:29Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eec38d49-7cbe-4599-9152-7e555924c93", "eventTime": "2019-07-22T21:13:29Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a44f551b-bab4-4359-8e51-639ce5ca1c1b", "record_id": "flaws_cloudtrail:0000385:a44f551b-bab4-4359-8e51-639ce5ca1c1b", "row_index": 385, "timestamp": "2019-07-22T21:13:38Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a44f551b-bab4-4359-8e51-639ce5ca1c1b", "eventTime": "2019-07-22T21:13:38Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a44f551b-bab4-4359-8e51-639ce5ca1c1b", "record_id": "flaws_cloudtrail:0000386:a44f551b-bab4-4359-8e51-639ce5ca1c1b", "row_index": 386, "timestamp": "2019-07-22T21:13:38Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a44f551b-bab4-4359-8e51-639ce5ca1c1b", "eventTime": "2019-07-22T21:13:38Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a79d9c83-0421-45d7-9c5b-f2280ac7d846", "record_id": "flaws_cloudtrail:0000387:a79d9c83-0421-45d7-9c5b-f2280ac7d846", "row_index": 387, "timestamp": "2019-07-22T21:13:40Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a79d9c83-0421-45d7-9c5b-f2280ac7d846", "eventTime": "2019-07-22T21:13:40Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a79d9c83-0421-45d7-9c5b-f2280ac7d846", "record_id": "flaws_cloudtrail:0000388:a79d9c83-0421-45d7-9c5b-f2280ac7d846", "row_index": 388, "timestamp": "2019-07-22T21:13:40Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a79d9c83-0421-45d7-9c5b-f2280ac7d846", "eventTime": "2019-07-22T21:13:40Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c426f50a-14cb-4fe5-831f-a8b270918b6e", "record_id": "flaws_cloudtrail:0000389:c426f50a-14cb-4fe5-831f-a8b270918b6e", "row_index": 389, "timestamp": "2019-07-22T21:13:43Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c426f50a-14cb-4fe5-831f-a8b270918b6e", "eventTime": "2019-07-22T21:13:43Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c426f50a-14cb-4fe5-831f-a8b270918b6e", "record_id": "flaws_cloudtrail:0000390:c426f50a-14cb-4fe5-831f-a8b270918b6e", "row_index": 390, "timestamp": "2019-07-22T21:13:43Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c426f50a-14cb-4fe5-831f-a8b270918b6e", "eventTime": "2019-07-22T21:13:43Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7a7ad7a-4437-4116-a028-30a482041a6b3", "record_id": "flaws_cloudtrail:0000391:b7a7ad7a-4437-4116-a028-30a482041a6b3", "row_index": 391, "timestamp": "2019-07-22T21:13:45Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7a7ad7a-4437-4116-a028-30a482041a6b3", "eventTime": "2019-07-22T21:13:45Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7a7ad7a-4437-4116-a028-30a482041a6b3", "record_id": "flaws_cloudtrail:0000392:b7a7ad7a-4437-4116-a028-30a482041a6b3", "row_index": 392, "timestamp": "2019-07-22T21:13:45Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7a7ad7a-4437-4116-a028-30a482041a6b3", "eventTime": "2019-07-22T21:13:45Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c923fe43-39e8-4b45-aa11-f6c69ccce59a", "record_id": "flaws_cloudtrail:0000393:c923fe43-39e8-4b45-aa11-f6c69ccce59a", "row_index": 393, "timestamp": "2019-07-22T21:13:48Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c923fe43-39e8-4b45-aa11-f6c69ccce59a", "eventTime": "2019-07-22T21:13:48Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c923fe43-39e8-4b45-aa11-f6c69ccce59a", "record_id": "flaws_cloudtrail:0000394:c923fe43-39e8-4b45-aa11-f6c69ccce59a", "row_index": 394, "timestamp": "2019-07-22T21:13:48Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c923fe43-39e8-4b45-aa11-f6c69ccce59a", "eventTime": "2019-07-22T21:13:48Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b13811-5994-4d4d-9149-d78899cc78a", "record_id": "flaws_cloudtrail:0000395:8b13811-5994-4d4d-9149-d78899cc78a", "row_index": 395, "timestamp": "2019-07-22T21:14:05Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b13811-5994-4d4d-9149-d78899cc78a", "eventTime": "2019-07-22T21:14:05Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b13811-5994-4d4d-9149-d78899cc78a", "record_id": "flaws_cloudtrail:0000396:8b13811-5994-4d4d-9149-d78899cc78a", "row_index": 396, "timestamp": "2019-07-22T21:14:05Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b13811-5994-4d4d-9149-d78899cc78a", "eventTime": "2019-07-22T21:14:05Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8e68f9a-403b-4254-8621-6c1cdce5597e", "record_id": "flaws_cloudtrail:0000397:c8e68f9a-403b-4254-8621-6c1cdce5597e", "row_index": 397, "timestamp": "2019-07-22T21:14:07Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8e68f9a-403b-4254-8621-6c1cdce5597e", "eventTime": "2019-07-22T21:14:07Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8e68f9a-403b-4254-8621-6c1cdce5597e", "record_id": "flaws_cloudtrail:0000398:c8e68f9a-403b-4254-8621-6c1cdce5597e", "row_index": 398, "timestamp": "2019-07-22T21:14:07Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8e68f9a-403b-4254-8621-6c1cdce5597e", "eventTime": "2019-07-22T21:14:07Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59f912f7-e354-40ca-b1e8-db41b233bf04", "record_id": "flaws_cloudtrail:0000399:59f912f7-e354-40ca-b1e8-db41b233bf04", "row_index": 399, "timestamp": "2019-07-22T21:14:10Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59f912f7-e354-40ca-b1e8-db41b233bf04", "eventTime": "2019-07-22T21:14:10Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59f912f7-e354-40ca-b1e8-db41b233bf04", "record_id": "flaws_cloudtrail:0000400:59f912f7-e354-40ca-b1e8-db41b233bf04", "row_index": 400, "timestamp": "2019-07-22T21:14:10Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59f912f7-e354-40ca-b1e8-db41b233bf04", "eventTime": "2019-07-22T21:14:10Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fd7a112-8188-404a-9b91-2829b01b3a25", "record_id": "flaws_cloudtrail:0000401:0fd7a112-8188-404a-9b91-2829b01b3a25", "row_index": 401, "timestamp": "2019-07-22T21:14:12Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fd7a112-8188-404a-9b91-2829b01b3a25", "eventTime": "2019-07-22T21:14:12Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fd7a112-8188-404a-9b91-2829b01b3a25", "record_id": "flaws_cloudtrail:0000402:0fd7a112-8188-404a-9b91-2829b01b3a25", "row_index": 402, "timestamp": "2019-07-22T21:14:12Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fd7a112-8188-404a-9b91-2829b01b3a25", "eventTime": "2019-07-22T21:14:12Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3180faf4-5803-453b-a050-7c16cd65a717", "record_id": "flaws_cloudtrail:0000403:3180faf4-5803-453b-a050-7c16cd65a717", "row_index": 403, "timestamp": "2019-07-22T21:14:28Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3180faf4-5803-453b-a050-7c16cd65a717", "eventTime": "2019-07-22T21:14:28Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3180faf4-5803-453b-a050-7c16cd65a717", "record_id": "flaws_cloudtrail:0000404:3180faf4-5803-453b-a050-7c16cd65a717", "row_index": 404, "timestamp": "2019-07-22T21:14:28Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3180faf4-5803-453b-a050-7c16cd65a717", "eventTime": "2019-07-22T21:14:28Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47a88d97-eadd-4459-a01d-16171412c238", "record_id": "flaws_cloudtrail:0000405:47a88d97-eadd-4459-a01d-16171412c238", "row_index": 405, "timestamp": "2019-07-22T21:14:31Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47a88d97-eadd-4459-a01d-16171412c238", "eventTime": "2019-07-22T21:14:31Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47a88d97-eadd-4459-a01d-16171412c238", "record_id": "flaws_cloudtrail:0000406:47a88d97-eadd-4459-a01d-16171412c238", "row_index": 406, "timestamp": "2019-07-22T21:14:31Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47a88d97-eadd-4459-a01d-16171412c238", "eventTime": "2019-07-22T21:14:31Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91f27d19-a5cb-439c-b136-1f9e64166", "record_id": "flaws_cloudtrail:0000407:91f27d19-a5cb-439c-b136-1f9e64166", "row_index": 407, "timestamp": "2019-07-22T21:14:36Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91f27d19-a5cb-439c-b136-1f9e64166", "eventTime": "2019-07-22T21:14:36Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91f27d19-a5cb-439c-b136-1f9e64166", "record_id": "flaws_cloudtrail:0000408:91f27d19-a5cb-439c-b136-1f9e64166", "row_index": 408, "timestamp": "2019-07-22T21:14:36Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91f27d19-a5cb-439c-b136-1f9e64166", "eventTime": "2019-07-22T21:14:36Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57bb9fb2-69f4-4ed1-a2f5-85e176ecc1b2", "record_id": "flaws_cloudtrail:0000409:57bb9fb2-69f4-4ed1-a2f5-85e176ecc1b2", "row_index": 409, "timestamp": "2019-07-22T21:14:39Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57bb9fb2-69f4-4ed1-a2f5-85e176ecc1b2", "eventTime": "2019-07-22T21:14:39Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57bb9fb2-69f4-4ed1-a2f5-85e176ecc1b2", "record_id": "flaws_cloudtrail:0000410:57bb9fb2-69f4-4ed1-a2f5-85e176ecc1b2", "row_index": 410, "timestamp": "2019-07-22T21:14:39Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57bb9fb2-69f4-4ed1-a2f5-85e176ecc1b2", "eventTime": "2019-07-22T21:14:39Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8cd86ee-dbea-4c38-b700-17eed341df24", "record_id": "flaws_cloudtrail:0000411:b8cd86ee-dbea-4c38-b700-17eed341df24", "row_index": 411, "timestamp": "2019-07-22T21:14:43Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8cd86ee-dbea-4c38-b700-17eed341df24", "eventTime": "2019-07-22T21:14:43Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8cd86ee-dbea-4c38-b700-17eed341df24", "record_id": "flaws_cloudtrail:0000412:b8cd86ee-dbea-4c38-b700-17eed341df24", "row_index": 412, "timestamp": "2019-07-22T21:14:43Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8cd86ee-dbea-4c38-b700-17eed341df24", "eventTime": "2019-07-22T21:14:43Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c932404-e676-44a5-9694-70066bd3d9c", "record_id": "flaws_cloudtrail:0000413:c932404-e676-44a5-9694-70066bd3d9c", "row_index": 413, "timestamp": "2019-07-22T21:14:45Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c932404-e676-44a5-9694-70066bd3d9c", "eventTime": "2019-07-22T21:14:45Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c932404-e676-44a5-9694-70066bd3d9c", "record_id": "flaws_cloudtrail:0000414:c932404-e676-44a5-9694-70066bd3d9c", "row_index": 414, "timestamp": "2019-07-22T21:14:45Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c932404-e676-44a5-9694-70066bd3d9c", "eventTime": "2019-07-22T21:14:45Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecd876542-b353-4106-89e7-a2a39a3d9770", "record_id": "flaws_cloudtrail:0000415:ecd876542-b353-4106-89e7-a2a39a3d9770", "row_index": 415, "timestamp": "2019-07-22T21:14:48Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecd876542-b353-4106-89e7-a2a39a3d9770", "eventTime": "2019-07-22T21:14:48Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecd876542-b353-4106-89e7-a2a39a3d9770", "record_id": "flaws_cloudtrail:0000416:ecd876542-b353-4106-89e7-a2a39a3d9770", "row_index": 416, "timestamp": "2019-07-22T21:14:48Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecd876542-b353-4106-89e7-a2a39a3d9770", "eventTime": "2019-07-22T21:14:48Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e8e8368-09f1-42e0-8af8-d78666d9c", "record_id": "flaws_cloudtrail:0000417:2e8e8368-09f1-42e0-8af8-d78666d9c", "row_index": 417, "timestamp": "2019-07-22T21:16:24Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e8e8368-09f1-42e0-8af8-d78666d9c", "eventTime": "2019-07-22T21:16:24Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e8e8368-09f1-42e0-8af8-d78666d9c", "record_id": "flaws_cloudtrail:0000418:2e8e8368-09f1-42e0-8af8-d78666d9c", "row_index": 418, "timestamp": "2019-07-22T21:16:24Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e8e8368-09f1-42e0-8af8-d78666d9c", "eventTime": "2019-07-22T21:16:24Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90876f-2f63-46fd-ba00-b9b487933cd16", "record_id": "flaws_cloudtrail:0000419:90876f-2f63-46fd-ba00-b9b487933cd16", "row_index": 419, "timestamp": "2019-07-22T21:16:26Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90876f-2f63-46fd-ba00-b9b487933cd16", "eventTime": "2019-07-22T21:16:26Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90876f-2f63-46fd-ba00-b9b487933cd16", "record_id": "flaws_cloudtrail:0000420:90876f-2f63-46fd-ba00-b9b487933cd16", "row_index": 420, "timestamp": "2019-07-22T21:16:26Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90876f-2f63-46fd-ba00-b9b487933cd16", "eventTime": "2019-07-22T21:16:26Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d654f13c-eae2-40d1-a2f3-430f7daaa379", "record_id": "flaws_cloudtrail:0000421:d654f13c-eae2-40d1-a2f3-430f7daaa379", "row_index": 421, "timestamp": "2019-07-22T21:16:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d654f13c-eae2-40d1-a2f3-430f7daaa379", "eventTime": "2019-07-22T21:16:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d654f13c-eae2-40d1-a2f3-430f7daaa379", "record_id": "flaws_cloudtrail:0000422:d654f13c-eae2-40d1-a2f3-430f7daaa379", "row_index": 422, "timestamp": "2019-07-22T21:16:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d654f13c-eae2-40d1-a2f3-430f7daaa379", "eventTime": "2019-07-22T21:16:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c8931aa-3d06-4094-ae67-91e38bcdde28", "record_id": "flaws_cloudtrail:0000423:3c8931aa-3d06-4094-ae67-91e38bcdde28", "row_index": 423, "timestamp": "2019-07-22T21:16:28Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c8931aa-3d06-4094-ae67-91e38bcdde28", "eventTime": "2019-07-22T21:16:28Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c8931aa-3d06-4094-ae67-91e38bcdde28", "record_id": "flaws_cloudtrail:0000424:3c8931aa-3d06-4094-ae67-91e38bcdde28", "row_index": 424, "timestamp": "2019-07-22T21:16:28Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c8931aa-3d06-4094-ae67-91e38bcdde28", "eventTime": "2019-07-22T21:16:28Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a5411fe-77fc-4a51-9f58-f87882e508", "record_id": "flaws_cloudtrail:0000425:5a5411fe-77fc-4a51-9f58-f87882e508", "row_index": 425, "timestamp": "2019-07-22T21:16:30Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a5411fe-77fc-4a51-9f58-f87882e508", "eventTime": "2019-07-22T21:16:30Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a5411fe-77fc-4a51-9f58-f87882e508", "record_id": "flaws_cloudtrail:0000426:5a5411fe-77fc-4a51-9f58-f87882e508", "row_index": 426, "timestamp": "2019-07-22T21:16:30Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a5411fe-77fc-4a51-9f58-f87882e508", "eventTime": "2019-07-22T21:16:30Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fe6ff27-2474-42b6-82be-842a1752a19e", "record_id": "flaws_cloudtrail:0000427:4fe6ff27-2474-42b6-82be-842a1752a19e", "row_index": 427, "timestamp": "2019-07-22T21:16:32Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fe6ff27-2474-42b6-82be-842a1752a19e", "eventTime": "2019-07-22T21:16:32Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fe6ff27-2474-42b6-82be-842a1752a19e", "record_id": "flaws_cloudtrail:0000428:4fe6ff27-2474-42b6-82be-842a1752a19e", "row_index": 428, "timestamp": "2019-07-22T21:16:32Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fe6ff27-2474-42b6-82be-842a1752a19e", "eventTime": "2019-07-22T21:16:32Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e896d51-cebb-4db2-a7fc-050c8f94521b", "record_id": "flaws_cloudtrail:0000429:7e896d51-cebb-4db2-a7fc-050c8f94521b", "row_index": 429, "timestamp": "2019-07-22T21:16:34Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e896d51-cebb-4db2-a7fc-050c8f94521b", "eventTime": "2019-07-22T21:16:34Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e896d51-cebb-4db2-a7fc-050c8f94521b", "record_id": "flaws_cloudtrail:0000430:7e896d51-cebb-4db2-a7fc-050c8f94521b", "row_index": 430, "timestamp": "2019-07-22T21:16:34Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e896d51-cebb-4db2-a7fc-050c8f94521b", "eventTime": "2019-07-22T21:16:34Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "191011-53be-4501-b5db-87865814b440", "record_id": "flaws_cloudtrail:0000431:191011-53be-4501-b5db-87865814b440", "row_index": 431, "timestamp": "2019-07-22T21:16:36Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "191011-53be-4501-b5db-87865814b440", "eventTime": "2019-07-22T21:16:36Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "191011-53be-4501-b5db-87865814b440", "record_id": "flaws_cloudtrail:0000432:191011-53be-4501-b5db-87865814b440", "row_index": 432, "timestamp": "2019-07-22T21:16:36Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "191011-53be-4501-b5db-87865814b440", "eventTime": "2019-07-22T21:16:36Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d3f3675-b1ab-4e5c-b127-2c78a009c27d", "record_id": "flaws_cloudtrail:0000433:5d3f3675-b1ab-4e5c-b127-2c78a009c27d", "row_index": 433, "timestamp": "2019-07-22T21:16:38Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d3f3675-b1ab-4e5c-b127-2c78a009c27d", "eventTime": "2019-07-22T21:16:38Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d3f3675-b1ab-4e5c-b127-2c78a009c27d", "record_id": "flaws_cloudtrail:0000434:5d3f3675-b1ab-4e5c-b127-2c78a009c27d", "row_index": 434, "timestamp": "2019-07-22T21:16:38Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d3f3675-b1ab-4e5c-b127-2c78a009c27d", "eventTime": "2019-07-22T21:16:38Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "aws-cli/1.16.202 Python/2.7.13 Linux/4.9.0-9-amd64 botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6093d8b6-e777-4b43-baad-0aac3e9b4fe5", "record_id": "flaws_cloudtrail:0000435:6093d8b6-e777-4b43-baad-0aac3e9b4fe5", "row_index": 435, "timestamp": "2019-07-22T21:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6093d8b6-e777-4b43-baad-0aac3e9b4fe5", "eventTime": "2019-07-22T21:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOOMKQ6GY1GZOWWA6", "expiration": "Jul 23, 2019 4:01:19 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6093d8b6-e777-4b43-baad-0aac3e9b4fe5", "record_id": "flaws_cloudtrail:0000436:6093d8b6-e777-4b43-baad-0aac3e9b4fe5", "row_index": 436, "timestamp": "2019-07-22T21:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6093d8b6-e777-4b43-baad-0aac3e9b4fe5", "eventTime": "2019-07-22T21:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOOMKQ6GY1GZOWWA6", "expiration": "Jul 23, 2019 4:01:19 AM", "sessionToken": "AgoJb3JpZ2luX2VjEF4aCXVzLXdlc3QtMiJGMEQCIB7Z2stu2jrXsjunWrPvA9ehAuzT2bKAnttk2TtJNJqjAiB9RtSP/ugrWNG8i0JS13K+KMR6u2sWFmeui6AHjKoyPyrjAwjH//////////8BEAAaDDk3NTQyNjI2MjAyOSIMupe+qHHh0MuaulBUKrcDBdpkSa/wLEcXj9Bh5gPPSATgWDk1Gldldz4SkxScCmT2Ei+TDi9V0IUP+tOLrrS7IquVson9ApEpBD+vBghG6x8a7HOE6rvkEiYt6P5rZw24YLK450iskv8PNQnd4F14uMaEgacPJXp9XS30GHEXc4nDQNfAeD34umDyXQxBb/RCWIRn0XKXoIi/N9cdS0ebmCPlUsOit56tjLw0hveOVOnkt8IUAaGuupf7arEmUOogoWTOi4OXubq3zP4Im1G0JxvTX83QlV22GFl6EbMwdjipBDZD561abuBD0HrOWe2jB8kJMhhKvMxrBg/iRyJBDu373rJ+snV/Rjqja9tvpdkBzKEagJBF1WhUlA2hWu9psE0DARi7Ru6cJBjFQH6kQ2GQWa8Sa75CzXz1Fyfnvj5wpjj69kRujnUugXp45qb2xyUwWWHvDBGg0FWWplz5j1r9IEZj5lFnn7h5WakTF4jYKjXkI2nYc/28KpF3enKv4n9aJ/jkV3KvFNE6spdunZg5eqWOdM9cCks5Ab9fjYTPAwUrtQb3cKUS/tvNcW31TpF4ViFHLJSbV91IWx+PGoLX+/UKZDCq1tjpBTq1AVJPxvJ+k5wC+UXrL1gChXayQ161KR+uB+fwm4PTfXTBAy1pAKr4AOxSkqV2NortNxrfGcyDWLgRTrddhT/TlvoNSdsAF5PYb/x4SqnTO8AM5xmnZkuFRPkc+h4B12wZ1eN212yffgXYmxXFOyZh7lk1WBMrxJC9FR8PPHa0pRsxLhHkypxUqHoI7Xrqs4PX5UIoSknIM/rZgceS5Ge1ey2kkerVSHF1Ppogi88KbxUosT7eTkI="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c108b55f-9cf0-411b-b36e-011f0f33b41e", "record_id": "flaws_cloudtrail:0000437:c108b55f-9cf0-411b-b36e-011f0f33b41e", "row_index": 437, "timestamp": "2019-07-22T21:47:06Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c108b55f-9cf0-411b-b36e-011f0f33b41e", "eventTime": "2019-07-22T21:47:06Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c108b55f-9cf0-411b-b36e-011f0f33b41e", "record_id": "flaws_cloudtrail:0000438:c108b55f-9cf0-411b-b36e-011f0f33b41e", "row_index": 438, "timestamp": "2019-07-22T21:47:06Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c108b55f-9cf0-411b-b36e-011f0f33b41e", "eventTime": "2019-07-22T21:47:06Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "400a819a-5a9f-4358-9672-9327e42a0485", "record_id": "flaws_cloudtrail:0000439:400a819a-5a9f-4358-9672-9327e42a0485", "row_index": 439, "timestamp": "2019-07-22T22:09:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "400a819a-5a9f-4358-9672-9327e42a0485", "eventTime": "2019-07-22T22:09:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "400a819a-5a9f-4358-9672-9327e42a0485", "record_id": "flaws_cloudtrail:0000440:400a819a-5a9f-4358-9672-9327e42a0485", "row_index": 440, "timestamp": "2019-07-22T22:09:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "400a819a-5a9f-4358-9672-9327e42a0485", "eventTime": "2019-07-22T22:09:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cce92ffb-1775-418c-a690-6f6b6ffa65b1", "record_id": "flaws_cloudtrail:0000441:cce92ffb-1775-418c-a690-6f6b6ffa65b1", "row_index": 441, "timestamp": "2019-07-22T22:10:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cce92ffb-1775-418c-a690-6f6b6ffa65b1", "eventTime": "2019-07-22T22:10:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cce92ffb-1775-418c-a690-6f6b6ffa65b1", "record_id": "flaws_cloudtrail:0000442:cce92ffb-1775-418c-a690-6f6b6ffa65b1", "row_index": 442, "timestamp": "2019-07-22T22:10:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cce92ffb-1775-418c-a690-6f6b6ffa65b1", "eventTime": "2019-07-22T22:10:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b82088d-8b72-4ec7-8186-f101518ae939", "record_id": "flaws_cloudtrail:0000443:4b82088d-8b72-4ec7-8186-f101518ae939", "row_index": 443, "timestamp": "2019-07-22T22:11:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b82088d-8b72-4ec7-8186-f101518ae939", "eventTime": "2019-07-22T22:11:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "volume-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b82088d-8b72-4ec7-8186-f101518ae939", "record_id": "flaws_cloudtrail:0000444:4b82088d-8b72-4ec7-8186-f101518ae939", "row_index": 444, "timestamp": "2019-07-22T22:11:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.7.7.109", "user_agent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b82088d-8b72-4ec7-8186-f101518ae939", "eventTime": "2019-07-22T22:11:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.7.7.109", "userAgent": "aws-cli/1.16.198 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 botocore/1.12.188", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {"items": [{"name": "volume-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3185edea-48de-4d0d-b56f-cbbd5f2787e7", "record_id": "flaws_cloudtrail:0000445:3185edea-48de-4d0d-b56f-cbbd5f2787e7", "row_index": 445, "timestamp": "2019-07-22T22:12:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.44.251.182", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3185edea-48de-4d0d-b56f-cbbd5f2787e7", "eventTime": "2019-07-22T22:12:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.44.251.182", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3185edea-48de-4d0d-b56f-cbbd5f2787e7", "record_id": "flaws_cloudtrail:0000446:3185edea-48de-4d0d-b56f-cbbd5f2787e7", "row_index": 446, "timestamp": "2019-07-22T22:12:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.44.251.182", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3185edea-48de-4d0d-b56f-cbbd5f2787e7", "eventTime": "2019-07-22T22:12:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.44.251.182", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eebfb8f4-8aaf-4b75-ad5b-475505d01149", "record_id": "flaws_cloudtrail:0000447:eebfb8f4-8aaf-4b75-ad5b-475505d01149", "row_index": 447, "timestamp": "2019-07-22T22:25:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIASIBSA0GW4DVIR2VD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.205.14.124", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 494, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eebfb8f4-8aaf-4b75-ad5b-475505d01149", "eventTime": "2019-07-22T22:25:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.205.14.124", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIASIBSA0GW4DVIR2VD", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae1d0139-b1ec-4f21-bb6d-2e2c09e91819", "record_id": "flaws_cloudtrail:0000448:ae1d0139-b1ec-4f21-bb6d-2e2c09e91819", "row_index": 448, "timestamp": "2019-07-22T22:26:29Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIASIBSA0GW4DVIR2VD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.205.14.124", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 523, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae1d0139-b1ec-4f21-bb6d-2e2c09e91819", "eventTime": "2019-07-22T22:26:29Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.205.14.124", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIASIBSA0GW4DVIR2VD", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ec4e27e-b7c4-495a-a52c-3539a234cfb4", "record_id": "flaws_cloudtrail:0000449:8ec4e27e-b7c4-495a-a52c-3539a234cfb4", "row_index": 449, "timestamp": "2019-07-22T22:27:59Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIASIBSA0GW4DVIR2VD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.205.14.124", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 523, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ec4e27e-b7c4-495a-a52c-3539a234cfb4", "eventTime": "2019-07-22T22:27:59Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.205.14.124", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIASIBSA0GW4DVIR2VD", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30d6038c-0792-4365-8e8c-96ab30d772e4", "record_id": "flaws_cloudtrail:0000450:30d6038c-0792-4365-8e8c-96ab30d772e4", "row_index": 450, "timestamp": "2019-07-22T22:28:30Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIASIBSA0GW4DVIR2VD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.205.14.124", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 526, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30d6038c-0792-4365-8e8c-96ab30d772e4", "eventTime": "2019-07-22T22:28:30Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.205.14.124", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIASIBSA0GW4DVIR2VD", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92451854-fdb8-4670-ae63-66b53b6bc64e", "record_id": "flaws_cloudtrail:0000451:92451854-fdb8-4670-ae63-66b53b6bc64e", "row_index": 451, "timestamp": "2019-07-22T22:29:03Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIASIBSA0GW4DVIR2VD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.205.14.124", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 524, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92451854-fdb8-4670-ae63-66b53b6bc64e", "eventTime": "2019-07-22T22:29:03Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.205.14.124", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIASIBSA0GW4DVIR2VD", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0e38b13-cd4a-4800-b502-4f4451777851", "record_id": "flaws_cloudtrail:0000452:d0e38b13-cd4a-4800-b502-4f4451777851", "row_index": 452, "timestamp": "2019-07-22T22:30:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIASIBSA0GW4DVIR2VD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.205.14.124", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 494, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0e38b13-cd4a-4800-b502-4f4451777851", "eventTime": "2019-07-22T22:30:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.205.14.124", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIASIBSA0GW4DVIR2VD", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "110298b83-cd5a-4ae1-b6c8-6258caa11391", "record_id": "flaws_cloudtrail:0000453:110298b83-cd5a-4ae1-b6c8-6258caa11391", "row_index": 453, "timestamp": "2019-07-22T22:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "110298b83-cd5a-4ae1-b6c8-6258caa11391", "eventTime": "2019-07-22T22:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYDKT42MK9MD3VFTV", "expiration": "Jul 23, 2019 4:41:41 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "110298b83-cd5a-4ae1-b6c8-6258caa11391", "record_id": "flaws_cloudtrail:0000454:110298b83-cd5a-4ae1-b6c8-6258caa11391", "row_index": 454, "timestamp": "2019-07-22T22:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "110298b83-cd5a-4ae1-b6c8-6258caa11391", "eventTime": "2019-07-22T22:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYDKT42MK9MD3VFTV", "expiration": "Jul 23, 2019 4:41:41 AM", "sessionToken": "AgoJb3JpZ2luX2VjEF8aCXVzLXdlc3QtMiJHMEUCID0ZcDeasVWjCGW4FtnX0twL/3EC9WSWDc2t+5XXMAiuAiEAsFlqPZJoRk+r/vyJOdcWKRxR8Sun2BhhvhdALPA5KiIq4wMIyP//////////ARAAGgw5NzU0MjYyNjIwMjkiDDMkBI35hpw7P7t1riq3AyRxZNcIt0OlNzFTDWn7XaJhvFE7WFQ4cSkF3HbYXmHj2GFdOaV3b7x/6bYlSOraBIGNKqzX+5rWZVFBZoI43ezxyPFlnUhdI1vTur+CJHVeq+NmBbEfwkNBmqnG0IpMjs8A1OFqBOwEuw/N0YKRB0zpzgxlzr4FW728/0FVEeM9OSn18xKDy/KbyYOFDoL854HvzrgUfI5tZlv51MCVY2dx/tImWQUke6nDR4KFgletm1rnsC8h1HaYhWomtLi39wrcvJ1ycHq96WwmGrauKRq56xDqWoPj5gKawddQXuzNaSQ8RQFisW+yKu5Byk+XXpwrmdu4Pnbu/hIhklFL/1DPGvbYN1RcAFJsIZ1cQ1j+SoMqqMci55/2M9wwkvIFKOWxIXlSuPYkm/y+HBBF12bo9gqzZk66OvKS8yd8/PmxDga9dHDHq8WmQCl3GF85Bwzoza2go/DBPT4Ecu2NK8DvmWAsZpXqrX94Qvzm3kfRTLwvqstA3uXPJKk8RXZdtnpqoghWaJKqYZRFm2JUJjMDDeX3xcl4m7mZHhJ7yAGb+1HhdNk2IszV4oloXPJfn3HYANBZfvcwuvLY6QU6tAFo+cgrLWXR6b2N6QDH6Qlx2FOEYSE51hHDEnSKrP/QC+lWhhieaZwU/3/+IGGs1KBcRry7rz1KcCr7YtIrpoxu308YHTJU7YXUAvYzrPHRpisxJw1kDk7zEcrwlpMbN3P8gpusNqNrm3VSAwI9SZVup/AWwxJf8UFITsS19/XRZC1vzl5sqa9yBya7kjdxH0Nu7HXpKEeIMcu1EUPBmQ2yE+UGbMaNqpbhNoz0ziymL9y7zUo="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff435bdd-102d-4d09-b938-5dbaf5a0497f", "record_id": "flaws_cloudtrail:0000455:ff435bdd-102d-4d09-b938-5dbaf5a0497f", "row_index": 455, "timestamp": "2019-07-22T22:31:43Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.251.207.7", "user_agent": "[aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff435bdd-102d-4d09-b938-5dbaf5a0497f", "eventTime": "2019-07-22T22:31:43Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.251.207.7", "userAgent": "[aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff435bdd-102d-4d09-b938-5dbaf5a0497f", "record_id": "flaws_cloudtrail:0000456:ff435bdd-102d-4d09-b938-5dbaf5a0497f", "row_index": 456, "timestamp": "2019-07-22T22:31:43Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.251.207.7", "user_agent": "[aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff435bdd-102d-4d09-b938-5dbaf5a0497f", "eventTime": "2019-07-22T22:31:43Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.251.207.7", "userAgent": "[aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db7f0032-09bf-4625-ad87-2c5d17aee3fd", "record_id": "flaws_cloudtrail:0000457:db7f0032-09bf-4625-ad87-2c5d17aee3fd", "row_index": 457, "timestamp": "2019-07-22T22:31:50Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIASIBSA0GW4DVIR2VD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.205.14.124", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 489, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db7f0032-09bf-4625-ad87-2c5d17aee3fd", "eventTime": "2019-07-22T22:31:50Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.205.14.124", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIASIBSA0GW4DVIR2VD", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "332834e4-46e1-459d-a66c-3b2157851639", "record_id": "flaws_cloudtrail:0000458:332834e4-46e1-459d-a66c-3b2157851639", "row_index": 458, "timestamp": "2019-07-22T22:32:34Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIASIBSA0GW4DVIR2VD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.205.14.124", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 499, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "332834e4-46e1-459d-a66c-3b2157851639", "eventTime": "2019-07-22T22:32:34Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.205.14.124", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIASIBSA0GW4DVIR2VD", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccec74b5-7702-44b7-bfe1-ec0ef048f2d8", "record_id": "flaws_cloudtrail:0000459:ccec74b5-7702-44b7-bfe1-ec0ef048f2d8", "row_index": 459, "timestamp": "2019-07-22T22:33:04Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIASIBSA0GW4DVIR2VD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.205.14.124", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 493, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccec74b5-7702-44b7-bfe1-ec0ef048f2d8", "eventTime": "2019-07-22T22:33:04Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.205.14.124", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIASIBSA0GW4DVIR2VD", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc65588b-7d72-4e78-ae9a-1ccc5a0b4c3a", "record_id": "flaws_cloudtrail:0000460:dc65588b-7d72-4e78-ae9a-1ccc5a0b4c3a", "row_index": 460, "timestamp": "2019-07-22T22:34:07Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIASIBSA0GW4DVIR2VD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.205.14.124", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 487, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc65588b-7d72-4e78-ae9a-1ccc5a0b4c3a", "eventTime": "2019-07-22T22:34:07Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.205.14.124", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIASIBSA0GW4DVIR2VD", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d133719-adc3-4eed-bbfb-32945c691b7d", "record_id": "flaws_cloudtrail:0000461:9d133719-adc3-4eed-bbfb-32945c691b7d", "row_index": 461, "timestamp": "2019-07-22T22:34:22Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.251.207.7", "user_agent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d133719-adc3-4eed-bbfb-32945c691b7d", "eventTime": "2019-07-22T22:34:22Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.251.207.7", "userAgent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d133719-adc3-4eed-bbfb-32945c691b7d", "record_id": "flaws_cloudtrail:0000462:9d133719-adc3-4eed-bbfb-32945c691b7d", "row_index": 462, "timestamp": "2019-07-22T22:34:22Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.251.207.7", "user_agent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d133719-adc3-4eed-bbfb-32945c691b7d", "eventTime": "2019-07-22T22:34:22Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.251.207.7", "userAgent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2120fdaa-0802-43f5-a70a-38a1cbb66f34", "record_id": "flaws_cloudtrail:0000463:2120fdaa-0802-43f5-a70a-38a1cbb66f34", "row_index": 463, "timestamp": "2019-07-22T22:34:51Z", "event_type": "ListFunctions", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIASIBSA0GW4DVIR2VD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.205.14.124", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 493, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2120fdaa-0802-43f5-a70a-38a1cbb66f34", "eventTime": "2019-07-22T22:34:51Z", "eventName": "ListFunctions", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.205.14.124", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIASIBSA0GW4DVIR2VD", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15269-ce68-42d3-a8a0-2e852aa84a80", "record_id": "flaws_cloudtrail:0000464:15269-ce68-42d3-a8a0-2e852aa84a80", "row_index": 464, "timestamp": "2019-07-22T22:35:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.251.207.7", "user_agent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15269-ce68-42d3-a8a0-2e852aa84a80", "eventTime": "2019-07-22T22:35:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.251.207.7", "userAgent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15269-ce68-42d3-a8a0-2e852aa84a80", "record_id": "flaws_cloudtrail:0000465:15269-ce68-42d3-a8a0-2e852aa84a80", "row_index": 465, "timestamp": "2019-07-22T22:35:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.251.207.7", "user_agent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15269-ce68-42d3-a8a0-2e852aa84a80", "eventTime": "2019-07-22T22:35:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.251.207.7", "userAgent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e95a44b-e76f-4b0d-9563-92998dcc5342", "record_id": "flaws_cloudtrail:0000466:2e95a44b-e76f-4b0d-9563-92998dcc5342", "row_index": 466, "timestamp": "2019-07-22T22:36:49Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIASIBSA0GW4DVIR2VD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.205.14.124", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 496, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e95a44b-e76f-4b0d-9563-92998dcc5342", "eventTime": "2019-07-22T22:36:49Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.205.14.124", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIASIBSA0GW4DVIR2VD", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30d1e464-d867-4c6b-be4e-dcaec2f8fe59", "record_id": "flaws_cloudtrail:0000467:30d1e464-d867-4c6b-be4e-dcaec2f8fe59", "row_index": 467, "timestamp": "2019-07-22T23:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30d1e464-d867-4c6b-be4e-dcaec2f8fe59", "eventTime": "2019-07-22T23:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1A4KRTWS0C432NHE", "expiration": "Jul 23, 2019 5:52:04 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30d1e464-d867-4c6b-be4e-dcaec2f8fe59", "record_id": "flaws_cloudtrail:0000468:30d1e464-d867-4c6b-be4e-dcaec2f8fe59", "row_index": 468, "timestamp": "2019-07-22T23:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30d1e464-d867-4c6b-be4e-dcaec2f8fe59", "eventTime": "2019-07-22T23:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1A4KRTWS0C432NHE", "expiration": "Jul 23, 2019 5:52:04 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62dba9c7-455e-4078-91de-4c8ec8cf4571", "record_id": "flaws_cloudtrail:0000469:62dba9c7-455e-4078-91de-4c8ec8cf4571", "row_index": 469, "timestamp": "2019-07-22T23:55:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1621, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62dba9c7-455e-4078-91de-4c8ec8cf4571", "eventTime": "2019-07-22T23:55:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIACB1ALF0LZ1UGPAAB", "expiration": "Jul 23, 2019 11:55:50 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ff97da7-d3d5-4afe-9f81-417a84e89f1b", "record_id": "flaws_cloudtrail:0000470:4ff97da7-d3d5-4afe-9f81-417a84e89f1b", "row_index": 470, "timestamp": "2019-07-22T23:55:50Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIACB1ALF0LZ1UGPAAB", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "90.250.6.91", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ff97da7-d3d5-4afe-9f81-417a84e89f1b", "eventTime": "2019-07-22T23:55:50Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "90.250.6.91", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIACB1ALF0LZ1UGPAAB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-22T23:55:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/22/[$LATEST]f4c23c99bdfe5cf9d611055438502650"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43acc982-b51a-416d-9216-ee06c43f2c99", "record_id": "flaws_cloudtrail:0000471:43acc982-b51a-416d-9216-ee06c43f2c99", "row_index": 471, "timestamp": "2019-07-22T23:55:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1617, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43acc982-b51a-416d-9216-ee06c43f2c99", "eventTime": "2019-07-22T23:55:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0AX47WWZU3NZXAZ0", "expiration": "Jul 23, 2019 11:55:50 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62dba9c7-455e-4078-91de-4c8ec8cf4571", "record_id": "flaws_cloudtrail:0000472:62dba9c7-455e-4078-91de-4c8ec8cf4571", "row_index": 472, "timestamp": "2019-07-22T23:55:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1621, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62dba9c7-455e-4078-91de-4c8ec8cf4571", "eventTime": "2019-07-22T23:55:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIACB1ALF0LZ1UGPAAB", "expiration": "Jul 23, 2019 11:55:50 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ff97da7-d3d5-4afe-9f81-417a84e89f1b", "record_id": "flaws_cloudtrail:0000473:4ff97da7-d3d5-4afe-9f81-417a84e89f1b", "row_index": 473, "timestamp": "2019-07-22T23:55:50Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIACB1ALF0LZ1UGPAAB", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "90.250.6.91", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ff97da7-d3d5-4afe-9f81-417a84e89f1b", "eventTime": "2019-07-22T23:55:50Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "90.250.6.91", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIACB1ALF0LZ1UGPAAB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-22T23:55:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/22/[$LATEST]f4c23c99bdfe5cf9d611055438502650"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43acc982-b51a-416d-9216-ee06c43f2c99", "record_id": "flaws_cloudtrail:0000474:43acc982-b51a-416d-9216-ee06c43f2c99", "row_index": 474, "timestamp": "2019-07-22T23:55:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1617, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43acc982-b51a-416d-9216-ee06c43f2c99", "eventTime": "2019-07-22T23:55:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0AX47WWZU3NZXAZ0", "expiration": "Jul 23, 2019 11:55:50 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "258e6e10-fb83-4d74-a349-a99bbd7de4ea", "record_id": "flaws_cloudtrail:0000475:258e6e10-fb83-4d74-a349-a99bbd7de4ea", "row_index": 475, "timestamp": "2019-07-22T23:59:13Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.254.4.186", "user_agent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "258e6e10-fb83-4d74-a349-a99bbd7de4ea", "eventTime": "2019-07-22T23:59:13Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.254.4.186", "userAgent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "258e6e10-fb83-4d74-a349-a99bbd7de4ea", "record_id": "flaws_cloudtrail:0000476:258e6e10-fb83-4d74-a349-a99bbd7de4ea", "row_index": 476, "timestamp": "2019-07-22T23:59:13Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.254.4.186", "user_agent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "258e6e10-fb83-4d74-a349-a99bbd7de4ea", "eventTime": "2019-07-22T23:59:13Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.254.4.186", "userAgent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20e1c347-9fb4-44a4-aa97-c159c4df069b", "record_id": "flaws_cloudtrail:0000477:20e1c347-9fb4-44a4-aa97-c159c4df069b", "row_index": 477, "timestamp": "2019-07-22T23:59:53Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.254.4.186", "user_agent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20e1c347-9fb4-44a4-aa97-c159c4df069b", "eventTime": "2019-07-22T23:59:53Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.254.4.186", "userAgent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20e1c347-9fb4-44a4-aa97-c159c4df069b", "record_id": "flaws_cloudtrail:0000478:20e1c347-9fb4-44a4-aa97-c159c4df069b", "row_index": 478, "timestamp": "2019-07-22T23:59:53Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.254.4.186", "user_agent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20e1c347-9fb4-44a4-aa97-c159c4df069b", "eventTime": "2019-07-22T23:59:53Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.254.4.186", "userAgent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "213446-c59f-4891-99fe-7cf6892cecfa", "record_id": "flaws_cloudtrail:0000479:213446-c59f-4891-99fe-7cf6892cecfa", "row_index": 479, "timestamp": "2019-07-22T23:59:59Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.254.4.186", "user_agent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "213446-c59f-4891-99fe-7cf6892cecfa", "eventTime": "2019-07-22T23:59:59Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.254.4.186", "userAgent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "213446-c59f-4891-99fe-7cf6892cecfa", "record_id": "flaws_cloudtrail:0000480:213446-c59f-4891-99fe-7cf6892cecfa", "row_index": 480, "timestamp": "2019-07-22T23:59:59Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.254.4.186", "user_agent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "213446-c59f-4891-99fe-7cf6892cecfa", "eventTime": "2019-07-22T23:59:59Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.254.4.186", "userAgent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab3b737c-c571-4082-a5a8-73de611875ad", "record_id": "flaws_cloudtrail:0000481:ab3b737c-c571-4082-a5a8-73de611875ad", "row_index": 481, "timestamp": "2019-07-23T00:00:36Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.254.4.186", "user_agent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab3b737c-c571-4082-a5a8-73de611875ad", "eventTime": "2019-07-23T00:00:36Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.254.4.186", "userAgent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab3b737c-c571-4082-a5a8-73de611875ad", "record_id": "flaws_cloudtrail:0000482:ab3b737c-c571-4082-a5a8-73de611875ad", "row_index": 482, "timestamp": "2019-07-23T00:00:36Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.254.4.186", "user_agent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab3b737c-c571-4082-a5a8-73de611875ad", "eventTime": "2019-07-23T00:00:36Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.254.4.186", "userAgent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ad9991a-0cf2-420b-b373-e6ffa2d662a6", "record_id": "flaws_cloudtrail:0000483:8ad9991a-0cf2-420b-b373-e6ffa2d662a6", "row_index": 483, "timestamp": "2019-07-23T00:00:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.254.4.186", "user_agent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ad9991a-0cf2-420b-b373-e6ffa2d662a6", "eventTime": "2019-07-23T00:00:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.254.4.186", "userAgent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ad9991a-0cf2-420b-b373-e6ffa2d662a6", "record_id": "flaws_cloudtrail:0000484:8ad9991a-0cf2-420b-b373-e6ffa2d662a6", "row_index": 484, "timestamp": "2019-07-23T00:00:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.254.4.186", "user_agent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ad9991a-0cf2-420b-b373-e6ffa2d662a6", "eventTime": "2019-07-23T00:00:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.254.4.186", "userAgent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6ec245a-493b-48bc-a527-fc56de88b784", "record_id": "flaws_cloudtrail:0000485:e6ec245a-493b-48bc-a527-fc56de88b784", "row_index": 485, "timestamp": "2019-07-23T00:02:03Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.254.4.186", "user_agent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6ec245a-493b-48bc-a527-fc56de88b784", "eventTime": "2019-07-23T00:02:03Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.254.4.186", "userAgent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6ec245a-493b-48bc-a527-fc56de88b784", "record_id": "flaws_cloudtrail:0000486:e6ec245a-493b-48bc-a527-fc56de88b784", "row_index": 486, "timestamp": "2019-07-23T00:02:03Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.254.4.186", "user_agent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6ec245a-493b-48bc-a527-fc56de88b784", "eventTime": "2019-07-23T00:02:03Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.254.4.186", "userAgent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03dde3d1-7f8a-4fcc-a7d5-010fff4ca411", "record_id": "flaws_cloudtrail:0000487:03dde3d1-7f8a-4fcc-a7d5-010fff4ca411", "row_index": 487, "timestamp": "2019-07-23T00:02:24Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.254.4.186", "user_agent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03dde3d1-7f8a-4fcc-a7d5-010fff4ca411", "eventTime": "2019-07-23T00:02:24Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.254.4.186", "userAgent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03dde3d1-7f8a-4fcc-a7d5-010fff4ca411", "record_id": "flaws_cloudtrail:0000488:03dde3d1-7f8a-4fcc-a7d5-010fff4ca411", "row_index": 488, "timestamp": "2019-07-23T00:02:24Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.254.4.186", "user_agent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03dde3d1-7f8a-4fcc-a7d5-010fff4ca411", "eventTime": "2019-07-23T00:02:24Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.254.4.186", "userAgent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eb454d5-823a-4b7c-afad-8aa2bc1740c9", "record_id": "flaws_cloudtrail:0000489:6eb454d5-823a-4b7c-afad-8aa2bc1740c9", "row_index": 489, "timestamp": "2019-07-23T00:03:08Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.254.4.186", "user_agent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eb454d5-823a-4b7c-afad-8aa2bc1740c9", "eventTime": "2019-07-23T00:03:08Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.254.4.186", "userAgent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eb454d5-823a-4b7c-afad-8aa2bc1740c9", "record_id": "flaws_cloudtrail:0000490:6eb454d5-823a-4b7c-afad-8aa2bc1740c9", "row_index": 490, "timestamp": "2019-07-23T00:03:08Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "201.254.4.186", "user_agent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eb454d5-823a-4b7c-afad-8aa2bc1740c9", "eventTime": "2019-07-23T00:03:08Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "201.254.4.186", "userAgent": "aws-cli/1.16.30 Python/2.7.5 Linux/3.10.0-862.el7.x86_64 botocore/1.12.20", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff4efad2-2e5e-49b2-81fc-e5830deb83d4", "record_id": "flaws_cloudtrail:0000491:ff4efad2-2e5e-49b2-81fc-e5830deb83d4", "row_index": 491, "timestamp": "2019-07-23T00:22:28Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff4efad2-2e5e-49b2-81fc-e5830deb83d4", "eventTime": "2019-07-23T00:22:28Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUXAPU5QJUQR83FUX", "expiration": "Jul 23, 2019 1:22:28 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff4efad2-2e5e-49b2-81fc-e5830deb83d4", "record_id": "flaws_cloudtrail:0000492:ff4efad2-2e5e-49b2-81fc-e5830deb83d4", "row_index": 492, "timestamp": "2019-07-23T00:22:28Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1936, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff4efad2-2e5e-49b2-81fc-e5830deb83d4", "eventTime": "2019-07-23T00:22:28Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUXAPU5QJUQR83FUX", "expiration": "Jul 23, 2019 1:22:28 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f822eb8e-35b0-48e9-9bf7-754d510b879f", "record_id": "flaws_cloudtrail:0000493:f822eb8e-35b0-48e9-9bf7-754d510b879f", "row_index": 493, "timestamp": "2019-07-23T00:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f822eb8e-35b0-48e9-9bf7-754d510b879f", "eventTime": "2019-07-23T00:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAM077U065L2D04JOK", "expiration": "Jul 23, 2019 6:35:26 AM", "sessionToken": "AgoJb3JpZ2luX2VjEGEaCXVzLXdlc3QtMiJGMEQCIGw0L4P0ufJhmuAiium2Fi0Qoc9QDHOBzwf1SpnBTn7YAiBhXf8UuEdrxCnIV/oKr/2DVPNYTnSjSbpa4+N7I2IJUSrjAwjK//////////8BEAAaDDk3NTQyNjI2MjAyOSIMQHvSyBJ59fheJRwWKrcDiGTdCpo6S4rRGXRnS67JBTc8cqXLSiVq5+7ZogTbVtzzP8f4vVGO5CItrNTNjawOVaaaQ3pniL3xh+LcLBU2KY5Z8aiVs8nC0rOfc7MM+H9R4sKoP1KgzIMZ3aD31qCQIz3NFjB6SgX1EdqurBXKgqHlCyDwHawAeACA5q7g0nmLuIk4pywO+HPB0kvfggAeUc45oAKl+gI4ygfN6+/Z4RvFWETi5E8dHBlS+TAjcMViz+EVSBtQZt7KBi3PaRmw3/ZrKqh7Ja6hfuBdNVHFfRmACG0Pr2c0xVuJJYFxuGsNjGHtAVadspDey+yxVbgj2MoXaouvm19AnH+hVhrMJgJNYROMCC9tu/a04VmUOTXXTty3duiRYL+Mk3UYttonKebIPHk18UwctNOPjiZfyIb78bZtXptNU5hhnpexZcADRC6hhDKBtUxUFW5goGXCoYkwtKP/ogbScWBJTVtj8O8LrLRvRo9xwxuMhbPrTlI6KjgTQGpHWZwSOAQQH2cSsbt1srBXrH6js3feA4FQr7/NQ7D8onAZ0qmwp7R3f6fWjDVRgXJQnalYsNAuyX11yKj8xtzbpjDaqtnpBTq1Acu8T/TRi8BXZauwSYW7i5n7XeKvj7JrPuMv0jiVqs4G2QzJL5Y1qeGxyFn/bQzNTYElToXPVDZWew7kskv2017fxAujgd74l6B45atY5/xMu6hwtc6lZ3Om3pj0CN9ER1jHkEsk93LsrVxPJS/OhEmwJpU8bKo/GMUUK1xHDCMesiDkw3TrDdSPSKoFyXUxeZHQ21n1qrgTK7ql1P9rj12rbBpgOhT6/c71HymOLTpwaE3sKKo="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f822eb8e-35b0-48e9-9bf7-754d510b879f", "record_id": "flaws_cloudtrail:0000494:f822eb8e-35b0-48e9-9bf7-754d510b879f", "row_index": 494, "timestamp": "2019-07-23T00:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f822eb8e-35b0-48e9-9bf7-754d510b879f", "eventTime": "2019-07-23T00:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAM077U065L2D04JOK", "expiration": "Jul 23, 2019 6:35:26 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd93f265-eac4-4952-ad25-28f60b4007d6", "record_id": "flaws_cloudtrail:0000495:dd93f265-eac4-4952-ad25-28f60b4007d6", "row_index": 495, "timestamp": "2019-07-23T01:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd93f265-eac4-4952-ad25-28f60b4007d6", "eventTime": "2019-07-23T01:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAR99IPVPOCPRDUEPE", "expiration": "Jul 23, 2019 7:38:16 AM", "sessionToken": "AgoJb3JpZ2luX2VjEGIaCXVzLXdlc3QtMiJIMEYCIQCCYYvsRkm7oETds7h77JQyIkMMD8BrAHb+HW2ltqc9DgIhAL1znF4Ca/dg5PE2zjl4qd2R5ZeIVQboxgg9H4PbuuMVKuMDCMv//////////wEQABoMOTc1NDI2MjYyMDI5IgyuCPYYmdjk1h6OLScqtwP99+YUKLGe2VW7nrI3hdfBnEpvAeVlIqh8W4iAvdfMjJYnyfKUdV1MznDxD0nBj34MsrC5rHYqFd4w3hsV+9RO1vKI9S6d2d+JaCvHZGdVVI8gKTu12ccvyMD5n4JRhQKUFdhQeC5jp+hxDHYgbE+TAkTRBsgGUtvvoUtPFwLhOObmmwed/X6xSk20VniT2gSIvYx99DeA2z3eaj/DlbFcqCPQ22zvb2EmTaQiEjzpZT99uzXcZAAQgcZC0r1bYwT9Xs2wedvjOyWRmeg1Py4DuFCZ7GjSzTXUUkjXjS5ZO/cIaPBuOyJ7Er2K268YykZxIpOaVS8anyGu2zjAjkBZVcEuVxX/SZLPZs9Ndv+6y9QpuD48PgV8o4/mj6TVvmneNCvH7Xll2GSu0bkyxjCELpuOCGETJvnbIFq89e0ht5k4A6Egqcbc5Nd/hzNBYhBBEZcuLaDZahahZH7PLPw2+MYEviKmBPpASeQzYNIbYvaxDjpflLRzDCV1QwyLPGj2x1zWllFodPQgZ3+NcTwbug/hL11zeZi68wKbynB+WSj9cQybncdM4XrIRZwfUM6FAzQgp8r2MOvG2ekFOrMBChWJNPAGN+0ajs6icBkI6ZshVF6wsJiBvoBAdIOnQjS0/SVmTeir7KPbkyBGiAAZnpQ9DfxfSwtse+aC1ilp1YJRqORzJ74+FAngpy6ztAb5qpoxe6KWdBPXfXI4mOWiwi1BB3Rs+Re2k5a2bJyVrfCDywQmuzYX+EXXW/0z2mitTtNeUFRCKjTytPadeeo/8+uJXAuNyUUA58IlmgCgtS4GC4cxnVwV7Wy2z5MFWN9zJ/Q="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd93f265-eac4-4952-ad25-28f60b4007d6", "record_id": "flaws_cloudtrail:0000496:dd93f265-eac4-4952-ad25-28f60b4007d6", "row_index": 496, "timestamp": "2019-07-23T01:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd93f265-eac4-4952-ad25-28f60b4007d6", "eventTime": "2019-07-23T01:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAR99IPVPOCPRDUEPE", "expiration": "Jul 23, 2019 7:38:16 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11351d7-8a1e-4e9d-9922-54649cefd0b", "record_id": "flaws_cloudtrail:0000497:11351d7-8a1e-4e9d-9922-54649cefd0b", "row_index": 497, "timestamp": "2019-07-23T02:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11351d7-8a1e-4e9d-9922-54649cefd0b", "eventTime": "2019-07-23T02:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAO8AABOK87943FK4Y", "expiration": "Jul 23, 2019 9:06:21 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11351d7-8a1e-4e9d-9922-54649cefd0b", "record_id": "flaws_cloudtrail:0000498:11351d7-8a1e-4e9d-9922-54649cefd0b", "row_index": 498, "timestamp": "2019-07-23T02:31:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11351d7-8a1e-4e9d-9922-54649cefd0b", "eventTime": "2019-07-23T02:31:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAO8AABOK87943FK4Y", "expiration": "Jul 23, 2019 9:06:21 AM", "sessionToken": "AgoJb3JpZ2luX2VjEGMaCXVzLXdlc3QtMiJGMEQCIDjWGgD/vh5om1Tsxn7E6eD8XWw6x61w3E6b0l4lVniXAiBinQP9YeNH7rPNdVJxMc+G1BtSzGIzPKHZGGqaGyfwUirjAwjM//////////8BEAAaDDk3NTQyNjI2MjAyOSIMy2f+Jpqrhffh1mniKrcDocgMFg/7L9lqsWirj14v8NtPnmi1bfs2BT+7iw6OM35s78twela7gj/dS5xkbiCUsHzk8TnMqj+y0KtREWPEKJscwJsnqrCL+wT/rySFR4FDtUVx8Kcpwe0BYqPi8wqEC2D/jwZDK4bmfnjhAjVEAlNylV0iYybIV3mA2KADIIkKq28d5RpFKI6tMv62qiXjCuBPlO7MHORQVb7FnLl1swsRJvFUKPNgwANkhv8aQ15N7TXQFdZtKLYxTJUmo0AAsMx0Oy5hup5AGWUOrXAZEonCwSqqf5O6vukkx3k6qADM75dxV5KJaumN34EQFKYJ5dHrAqSo+ypuDWuldEoImg3zuQj+0I5m1I2nwEpeTYKwwMn17ugPd1/EXuwRCx564+3/29pbDxnLagX20l5zs4QzgZRQ2R8jyiUEixg8nvlUF7qT5WKyKf4NMTHLKQWlPZ86vhk6473/bpdZXgmovqfLdpi5s38ReUI2hCd0nEy9mDs9wWyPmpYKXahxGkkJ6HGyIkpSfqs536acgjyBKXnZ8NhvW6dAKFId2VxMqQM7Dt9z8TwiZDjVlCG+In4K+P9fIWJt9zD64tnpBTq1AZCoq0lnz7EH7QQBzr97nsn+SjzUfGUFJxwYPoM0JLCEfoIkpztRSpkquLD5we7fknfYDlP9N0V6VcBY3N4R9FA5I9H9uPBHLKH+WID/bH1onk+UXFQl8hBJZo6gPMFkOqDJZijzSc6IXwcMvGbtIyIqgEqfv0IHqkIgHJKjlG0k70jkMSBX24MAWLzcoYxYAFrVx2ZnaCtL3qE9fhuYkTkHrZdJkLlTJsHdIDryhEJOO1K9J7s="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d05ea2ab-71ce-4522-b65e-4ea4d8b9ac01", "record_id": "flaws_cloudtrail:0000499:d05ea2ab-71ce-4522-b65e-4ea4d8b9ac01", "row_index": 499, "timestamp": "2019-07-23T03:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d05ea2ab-71ce-4522-b65e-4ea4d8b9ac01", "eventTime": "2019-07-23T03:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA38OW3P8ET9KNZJ6V", "expiration": "Jul 23, 2019 10:05:49 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d05ea2ab-71ce-4522-b65e-4ea4d8b9ac01", "record_id": "flaws_cloudtrail:0000500:d05ea2ab-71ce-4522-b65e-4ea4d8b9ac01", "row_index": 500, "timestamp": "2019-07-23T03:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d05ea2ab-71ce-4522-b65e-4ea4d8b9ac01", "eventTime": "2019-07-23T03:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA38OW3P8ET9KNZJ6V", "expiration": "Jul 23, 2019 10:05:49 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf106bfc-518c-4e47-8123-862555e1411fe", "record_id": "flaws_cloudtrail:0000501:cf106bfc-518c-4e47-8123-862555e1411fe", "row_index": 501, "timestamp": "2019-07-23T04:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf106bfc-518c-4e47-8123-862555e1411fe", "eventTime": "2019-07-23T04:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHL6SASXNFO6JHEXS", "expiration": "Jul 23, 2019 10:51:53 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf106bfc-518c-4e47-8123-862555e1411fe", "record_id": "flaws_cloudtrail:0000502:cf106bfc-518c-4e47-8123-862555e1411fe", "row_index": 502, "timestamp": "2019-07-23T04:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf106bfc-518c-4e47-8123-862555e1411fe", "eventTime": "2019-07-23T04:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHL6SASXNFO6JHEXS", "expiration": "Jul 23, 2019 10:51:53 AM", "sessionToken": "AgoJb3JpZ2luX2VjEGUaCXVzLXdlc3QtMiJIMEYCIQCdtipkrAaCMElZdMV2zK3vft0knfOKisNrJPFY3aKBlQIhAOK4z1japWI0Ou1u+i+V2xWqmVAcRV1NLi07C/WjSUHZKuMDCM7//////////wEQABoMOTc1NDI2MjYyMDI5IgwJLOO4e1JXXkFH/BAqtwPv4lOy7nzNM/N2TOp/0FmuUsihBIuqNKT7/iuB5eIATEepbXYWRCoNQ5gYH/j8RzApvhwGGbXPuKBW24zrhFRgvC4vjKja5vNB/dowDzndh8xUCIE/zugtLtuiKIBKtHbY/kyRilMX7y0b2KI+15JWsbygA4C2vVsz4whC9g1zsvpEtSOkSMuJN4vx0ihDulHDlcuPwjAU4KhVP4OaCN60AuqwPxCCg/FFGw809HvS3iUPisrQXmmt6lYTcHNcoEWNCcydRtjgCfnm/UkJLY1vXHfpgJMafubobPp8UiETM6uW+iJQCQBeZ0IpR9iWrCndbcMSKt8Pa/g8Md5zgl9hBQrdAtHLxjQ9sBW6e5fNqOKV8RbblhvyCUX5eNU5eLVsUFOx5u0WnWdqJOVf2pLiLhgkfNHoofSBmj4xhxRZ6F97eEHToMUYrjWb8tBkRTVCnTaVzjpsPrsPa10bjE2bMKsD+shv/lDFgm045ZlXfeuyS45y8NqSO/2/INyrK6Y3FOiKjFIJzfXFIw8K9Rmqa5jdvWcPaQtR+/7JGqv89zsypSInON32dEJCNmAxR+gPgnuTPteWMJub2ukFOrMBiEQDAy9rEuTnNFT+WRPliKZc2TtdfmLbaosTXq4Paw7WLikPYow4aF+1/mIuvy9Uk7BXn9tZgDz9p73XtOM9G6O8Brnx1E1RFsFwt9CJiPmt/LkaUdijeZr2ihoFhOsvwSdC9QYR5Md1C14CMIzXsP16iYbaTylhzrMZj3d+jBkNoNk2kKTdIXhRKG3H6p3aKvyiEDFSFQKxeOsRZkHu/6XqVDZcty6yFwxnGeqca5hOcAQ="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2605e8e8-d175-4cd6-acec-38329d25f6e4", "record_id": "flaws_cloudtrail:0000503:2605e8e8-d175-4cd6-acec-38329d25f6e4", "row_index": 503, "timestamp": "2019-07-23T05:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2605e8e8-d175-4cd6-acec-38329d25f6e4", "eventTime": "2019-07-23T05:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6BKT7FC3QQXR1EM0", "expiration": "Jul 23, 2019 12:01:31 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2605e8e8-d175-4cd6-acec-38329d25f6e4", "record_id": "flaws_cloudtrail:0000504:2605e8e8-d175-4cd6-acec-38329d25f6e4", "row_index": 504, "timestamp": "2019-07-23T05:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2605e8e8-d175-4cd6-acec-38329d25f6e4", "eventTime": "2019-07-23T05:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6BKT7FC3QQXR1EM0", "expiration": "Jul 23, 2019 12:01:31 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73daa1b4-a235-4375-a419-0c6e2bfc9241", "record_id": "flaws_cloudtrail:0000505:73daa1b4-a235-4375-a419-0c6e2bfc9241", "row_index": 505, "timestamp": "2019-07-23T06:07:16Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "[aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73daa1b4-a235-4375-a419-0c6e2bfc9241", "eventTime": "2019-07-23T06:07:16Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "[aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73daa1b4-a235-4375-a419-0c6e2bfc9241", "record_id": "flaws_cloudtrail:0000506:73daa1b4-a235-4375-a419-0c6e2bfc9241", "row_index": 506, "timestamp": "2019-07-23T06:07:16Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "[aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73daa1b4-a235-4375-a419-0c6e2bfc9241", "eventTime": "2019-07-23T06:07:16Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "[aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a81817f-78b0-444b-9113-469511d6632e3", "record_id": "flaws_cloudtrail:0000507:0a81817f-78b0-444b-9113-469511d6632e3", "row_index": 507, "timestamp": "2019-07-23T06:09:57Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a81817f-78b0-444b-9113-469511d6632e3", "eventTime": "2019-07-23T06:09:57Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a81817f-78b0-444b-9113-469511d6632e3", "record_id": "flaws_cloudtrail:0000508:0a81817f-78b0-444b-9113-469511d6632e3", "row_index": 508, "timestamp": "2019-07-23T06:09:57Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a81817f-78b0-444b-9113-469511d6632e3", "eventTime": "2019-07-23T06:09:57Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bc9285f-8638-447d-9925-e063be63df3b", "record_id": "flaws_cloudtrail:0000509:2bc9285f-8638-447d-9925-e063be63df3b", "row_index": 509, "timestamp": "2019-07-23T06:11:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bc9285f-8638-447d-9925-e063be63df3b", "eventTime": "2019-07-23T06:11:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bc9285f-8638-447d-9925-e063be63df3b", "record_id": "flaws_cloudtrail:0000510:2bc9285f-8638-447d-9925-e063be63df3b", "row_index": 510, "timestamp": "2019-07-23T06:11:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bc9285f-8638-447d-9925-e063be63df3b", "eventTime": "2019-07-23T06:11:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9714b23-da4b-41d3-8116-26b717794e7", "record_id": "flaws_cloudtrail:0000511:b9714b23-da4b-41d3-8116-26b717794e7", "row_index": 511, "timestamp": "2019-07-23T06:12:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9714b23-da4b-41d3-8116-26b717794e7", "eventTime": "2019-07-23T06:12:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9714b23-da4b-41d3-8116-26b717794e7", "record_id": "flaws_cloudtrail:0000512:b9714b23-da4b-41d3-8116-26b717794e7", "row_index": 512, "timestamp": "2019-07-23T06:12:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9714b23-da4b-41d3-8116-26b717794e7", "eventTime": "2019-07-23T06:12:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d86ef69a-62b2-4dba-ae0f-12fcdc31a9af", "record_id": "flaws_cloudtrail:0000513:d86ef69a-62b2-4dba-ae0f-12fcdc31a9af", "row_index": 513, "timestamp": "2019-07-23T06:12:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d86ef69a-62b2-4dba-ae0f-12fcdc31a9af", "eventTime": "2019-07-23T06:12:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJERXpwOFk2UHFxZ2Q2SzRSYlVaOXladS9YM2JLU3YwSk96RDRMZ2MvTXNXajR2QkU3V0Fkc1ZSYVBkL0pXcENUVzJyZFV0VFdEc0orQkN1VUdlQXIrN0VhQTRHSkpsSmxBVG14d1hENzQzTHBqb3FOMkY3b2Y0OS93dXdhVmc4cDVCajVNTHZjeGdnRk01WjBHNzJoWWRBRE1mSjRMSFlEdFQ1QnkvK2RHbEVUaHpIU081WUgwQVUzZzl4ZnVMWjI3VWNtRmN3OHF5VDZKUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d86ef69a-62b2-4dba-ae0f-12fcdc31a9af", "record_id": "flaws_cloudtrail:0000514:d86ef69a-62b2-4dba-ae0f-12fcdc31a9af", "row_index": 514, "timestamp": "2019-07-23T06:12:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d86ef69a-62b2-4dba-ae0f-12fcdc31a9af", "eventTime": "2019-07-23T06:12:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJERXpwOFk2UHFxZ2Q2SzRSYlVaOXladS9YM2JLU3YwSk96RDRMZ2MvTXNXajR2QkU3V0Fkc1ZSYVBkL0pXcENUVzJyZFV0VFdEc0orQkN1VUdlQXIrN0VhQTRHSkpsSmxBVG14d1hENzQzTHBqb3FOMkY3b2Y0OS93dXdhVmc4cDVCajVNTHZjeGdnRk01WjBHNzJoWWRBRE1mSjRMSFlEdFQ1QnkvK2RHbEVUaHpIU081WUgwQVUzZzl4ZnVMWjI3VWNtRmN3OHF5VDZKUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30f47e98-a923-43aa-9070-a9a70e9bb327", "record_id": "flaws_cloudtrail:0000515:30f47e98-a923-43aa-9070-a9a70e9bb327", "row_index": 515, "timestamp": "2019-07-23T06:12:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30f47e98-a923-43aa-9070-a9a70e9bb327", "eventTime": "2019-07-23T06:12:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwTTk1SitQcGZQUHVUUFdoWFhndGVZNjlicGU4VGxNRG5sSEtqVmdKRFhodzdiZ21tT29NZWpSWW1pL0JlaDQwdmdzdHljenRHU2g5N0IzdENMODk1ZzE3Q0s5dDI4VmZoZ3o4RzEzR0dlU29tdE5vcXdTRmVpOWFORm85NGFNTnJPWHBic1Ywd1I5dUgzWW00K2dZOWZ3ZEZIanJHaFlyVHdrUWNwRFRlR1dmdk44aWd1SXpmUUt0UjYyeGVBN25XbVJqTjRKcXRWQzBidz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30f47e98-a923-43aa-9070-a9a70e9bb327", "record_id": "flaws_cloudtrail:0000516:30f47e98-a923-43aa-9070-a9a70e9bb327", "row_index": 516, "timestamp": "2019-07-23T06:12:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30f47e98-a923-43aa-9070-a9a70e9bb327", "eventTime": "2019-07-23T06:12:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwTTk1SitQcGZQUHVUUFdoWFhndGVZNjlicGU4VGxNRG5sSEtqVmdKRFhodzdiZ21tT29NZWpSWW1pL0JlaDQwdmdzdHljenRHU2g5N0IzdENMODk1ZzE3Q0s5dDI4VmZoZ3o4RzEzR0dlU29tdE5vcXdTRmVpOWFORm85NGFNTnJPWHBic1Ywd1I5dUgzWW00K2dZOWZ3ZEZIanJHaFlyVHdrUWNwRFRlR1dmdk44aWd1SXpmUUt0UjYyeGVBN25XbVJqTjRKcXRWQzBidz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a1e840a-6fee-4d21-a311-805410e1baa", "record_id": "flaws_cloudtrail:0000517:2a1e840a-6fee-4d21-a311-805410e1baa", "row_index": 517, "timestamp": "2019-07-23T06:12:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a1e840a-6fee-4d21-a311-805410e1baa", "eventTime": "2019-07-23T06:12:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2RUhMOUFaM29BVUthcEtHUzFwVDU5aUJiTmlXNndkR002Z004dmxNQXRhSHJZcE1vTUo0UklGNkJYSUdhVi92WTk5NTlEd1poaHArSjF3b2hMZkdBdk5abXc5bTh5TmZ5dnFPbnFLQ3VwSlRYY1NxVFZYYkt0bHJ2bmRyNk5Qcml4STVTM2c5MHFyYk5jV2hnUnFOaGtXdjhVM0VtVzl5SUk4V1U1cFhMVEF6NVpYOXQ3UEZkTnVJVXRnclowTFByM0VMQWRJUGVJaUdXQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a1e840a-6fee-4d21-a311-805410e1baa", "record_id": "flaws_cloudtrail:0000518:2a1e840a-6fee-4d21-a311-805410e1baa", "row_index": 518, "timestamp": "2019-07-23T06:12:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1087, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a1e840a-6fee-4d21-a311-805410e1baa", "eventTime": "2019-07-23T06:12:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2RUhMOUFaM29BVUthcEtHUzFwVDU5aUJiTmlXNndkR002Z004dmxNQXRhSHJZcE1vTUo0UklGNkJYSUdhVi92WTk5NTlEd1poaHArSjF3b2hMZkdBdk5abXc5bTh5TmZ5dnFPbnFLQ3VwSlRYY1NxVFZYYkt0bHJ2bmRyNk5Qcml4STVTM2c5MHFyYk5jV2hnUnFOaGtXdjhVM0VtVzl5SUk4V1U1cFhMVEF6NVpYOXQ3UEZkTnVJVXRnclowTFByM0VMQWRJUGVJaUdXQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b15153-77dc-449b-ad23-5af46753", "record_id": "flaws_cloudtrail:0000519:3b15153-77dc-449b-ad23-5af46753", "row_index": 519, "timestamp": "2019-07-23T06:12:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b15153-77dc-449b-ad23-5af46753", "eventTime": "2019-07-23T06:12:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpLzV3enVkU3NlTzhuSU5QbHlTWk8rOUlYL0RBYkM1N0R3UjRTNTRnbGMzVGNZZEx4aHBleVROc2xhYndyaFk3L2tSQ3dHckUyaDZXcjBYZy9JTkNMZXhiNlVyaVBPYUgxVkpQWWcxaEQyWVh1cWlVVktOc3hOUDFOcUw4ZkR1eFhXRUNBeStJNmdpOEpRWjd4YTduQkcycXBXMGU2TzlHRXh6azlPeFlmOWFKeXREdU5sZHg4aVBMNXdWYTRtTHJ6M25MQUJiZmRNOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b15153-77dc-449b-ad23-5af46753", "record_id": "flaws_cloudtrail:0000520:3b15153-77dc-449b-ad23-5af46753", "row_index": 520, "timestamp": "2019-07-23T06:12:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b15153-77dc-449b-ad23-5af46753", "eventTime": "2019-07-23T06:12:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpLzV3enVkU3NlTzhuSU5QbHlTWk8rOUlYL0RBYkM1N0R3UjRTNTRnbGMzVGNZZEx4aHBleVROc2xhYndyaFk3L2tSQ3dHckUyaDZXcjBYZy9JTkNMZXhiNlVyaVBPYUgxVkpQWWcxaEQyWVh1cWlVVktOc3hOUDFOcUw4ZkR1eFhXRUNBeStJNmdpOEpRWjd4YTduQkcycXBXMGU2TzlHRXh6azlPeFlmOWFKeXREdU5sZHg4aVBMNXdWYTRtTHJ6M25MQUJiZmRNOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "597fa969-161d-4ad3-b627-d39d23431e3", "record_id": "flaws_cloudtrail:0000521:597fa969-161d-4ad3-b627-d39d23431e3", "row_index": 521, "timestamp": "2019-07-23T06:12:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "597fa969-161d-4ad3-b627-d39d23431e3", "eventTime": "2019-07-23T06:12:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0T2Nka3NKYVZQcmh6NDRJRGJ1RlJPbk1BR3NoS3FCWG9QRDFCVlJGcU96Q3VHcVVvMG9zRmtBc1duM2RqWXZCOFNidWt1a2JIZkk0eEdxNXFJU1hQZU0xeHZxL1NTTmtxM1FxL3gvUWd4VXA3MkNtN245N3B4QUFPOXU2N3pOaTkybnVRamkxS0lpSU1sV00yaWRWSVZWY2xrMG9nWmRkeUVCT0p3Tys4ci9hUzZtcXBKUVNFMHFSRGplZTNDQUkrV1FXR0dzS1JvZUlFdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "597fa969-161d-4ad3-b627-d39d23431e3", "record_id": "flaws_cloudtrail:0000522:597fa969-161d-4ad3-b627-d39d23431e3", "row_index": 522, "timestamp": "2019-07-23T06:12:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "597fa969-161d-4ad3-b627-d39d23431e3", "eventTime": "2019-07-23T06:12:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0T2Nka3NKYVZQcmh6NDRJRGJ1RlJPbk1BR3NoS3FCWG9QRDFCVlJGcU96Q3VHcVVvMG9zRmtBc1duM2RqWXZCOFNidWt1a2JIZkk0eEdxNXFJU1hQZU0xeHZxL1NTTmtxM1FxL3gvUWd4VXA3MkNtN245N3B4QUFPOXU2N3pOaTkybnVRamkxS0lpSU1sV00yaWRWSVZWY2xrMG9nWmRkeUVCT0p3Tys4ci9hUzZtcXBKUVNFMHFSRGplZTNDQUkrV1FXR0dzS1JvZUlFdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "617687-5c04-4086-9bf8-191634e593792a", "record_id": "flaws_cloudtrail:0000523:617687-5c04-4086-9bf8-191634e593792a", "row_index": 523, "timestamp": "2019-07-23T06:12:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "617687-5c04-4086-9bf8-191634e593792a", "eventTime": "2019-07-23T06:12:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGQ3REeFdCbDFiRWJTOWgxSFQxNzdYYVorbkNDWlZEUTZWVDBWY1Ntd2FRMTc5Y1RXQ3lKL3Zia1RRTzFuUDFzeGRtcyt0YmQ5OTNBdWpKU1BYd3ppZlMxRks3bG9WOVhaaFFFalFFQ1NYMGc0UjUzQU8yc0llSCs0NWRiNTgwUzM1S2JFTXROclRSbkNhSXZqb0tuem1CUGZ4d1hRajZ0MHBxK010dUlhQzMyKzRoclhOQ01YQzJpek5oRzdieWNTN0VlT2xabUpBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "617687-5c04-4086-9bf8-191634e593792a", "record_id": "flaws_cloudtrail:0000524:617687-5c04-4086-9bf8-191634e593792a", "row_index": 524, "timestamp": "2019-07-23T06:12:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "617687-5c04-4086-9bf8-191634e593792a", "eventTime": "2019-07-23T06:12:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGQ3REeFdCbDFiRWJTOWgxSFQxNzdYYVorbkNDWlZEUTZWVDBWY1Ntd2FRMTc5Y1RXQ3lKL3Zia1RRTzFuUDFzeGRtcyt0YmQ5OTNBdWpKU1BYd3ppZlMxRks3bG9WOVhaaFFFalFFQ1NYMGc0UjUzQU8yc0llSCs0NWRiNTgwUzM1S2JFTXROclRSbkNhSXZqb0tuem1CUGZ4d1hRajZ0MHBxK010dUlhQzMyKzRoclhOQ01YQzJpek5oRzdieWNTN0VlT2xabUpBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46b0ac75-dbab-48a0-b6e0-ea78096f", "record_id": "flaws_cloudtrail:0000525:46b0ac75-dbab-48a0-b6e0-ea78096f", "row_index": 525, "timestamp": "2019-07-23T06:12:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46b0ac75-dbab-48a0-b6e0-ea78096f", "eventTime": "2019-07-23T06:12:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDUWNzU1A5S0tjaEF5NGlsSUhhaU05bVVVeUVrbmFwOFduWlpib2VqVVVKSzBMMWQ5aWhwdHpzZkgzcmQrekhycXE5NnYvbTFla0dkNnhKMWxPMzUrM0MyK1h6ZUdmWFZ4enV5MTRHUnNnT015WUhTbE5NTmF4R2Q3WWY1elRaN1ZMZ3dPalI1emhSdWRDWUtFeUpFeVdNaExqLzNReDk1S2h3NktiM0VUcXZDWm9xVGh2S2c1bm5wbkR4bzhNd1oxRWs1em0zeDhOdWJCQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46b0ac75-dbab-48a0-b6e0-ea78096f", "record_id": "flaws_cloudtrail:0000526:46b0ac75-dbab-48a0-b6e0-ea78096f", "row_index": 526, "timestamp": "2019-07-23T06:12:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46b0ac75-dbab-48a0-b6e0-ea78096f", "eventTime": "2019-07-23T06:12:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDUWNzU1A5S0tjaEF5NGlsSUhhaU05bVVVeUVrbmFwOFduWlpib2VqVVVKSzBMMWQ5aWhwdHpzZkgzcmQrekhycXE5NnYvbTFla0dkNnhKMWxPMzUrM0MyK1h6ZUdmWFZ4enV5MTRHUnNnT015WUhTbE5NTmF4R2Q3WWY1elRaN1ZMZ3dPalI1emhSdWRDWUtFeUpFeVdNaExqLzNReDk1S2h3NktiM0VUcXZDWm9xVGh2S2c1bm5wbkR4bzhNd1oxRWs1em0zeDhOdWJCQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0601a31-6b65-4dc2-920e-c97d0759bf93", "record_id": "flaws_cloudtrail:0000527:a0601a31-6b65-4dc2-920e-c97d0759bf93", "row_index": 527, "timestamp": "2019-07-23T06:12:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0601a31-6b65-4dc2-920e-c97d0759bf93", "eventTime": "2019-07-23T06:12:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlVnlYWFB1QTJwd1hleEFKa2luL2RXY0lnWDgyaUh0bUNBazFxWi90MjY5VlJFanVDV3d1QXNIRGMzMWJGRGpseFJwUWRmQ3JqeER1QkEycXlUVVJQRktLYWRqSHRZV0NWMWhkUDBMaUJOUFJjTWxoVUsxbThZZktiOURvNTREbndON292d0VCa1UxNWFjbnZkZlcrWU1rZ3NUSjlaMVR2czl3QTdMMU4zRXlNK3pqbHoyT1VGQ1piOVNYRmZMcVFNU1RPdG5IZmYrUHA0QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0601a31-6b65-4dc2-920e-c97d0759bf93", "record_id": "flaws_cloudtrail:0000528:a0601a31-6b65-4dc2-920e-c97d0759bf93", "row_index": 528, "timestamp": "2019-07-23T06:12:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0601a31-6b65-4dc2-920e-c97d0759bf93", "eventTime": "2019-07-23T06:12:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlVnlYWFB1QTJwd1hleEFKa2luL2RXY0lnWDgyaUh0bUNBazFxWi90MjY5VlJFanVDV3d1QXNIRGMzMWJGRGpseFJwUWRmQ3JqeER1QkEycXlUVVJQRktLYWRqSHRZV0NWMWhkUDBMaUJOUFJjTWxoVUsxbThZZktiOURvNTREbndON292d0VCa1UxNWFjbnZkZlcrWU1rZ3NUSjlaMVR2czl3QTdMMU4zRXlNK3pqbHoyT1VGQ1piOVNYRmZMcVFNU1RPdG5IZmYrUHA0QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e57aa93c-5399-4458-b421-bc8c78c0d098", "record_id": "flaws_cloudtrail:0000529:e57aa93c-5399-4458-b421-bc8c78c0d098", "row_index": 529, "timestamp": "2019-07-23T06:12:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e57aa93c-5399-4458-b421-bc8c78c0d098", "eventTime": "2019-07-23T06:12:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4YkJOV2hpenkzNzIrRlpROERJYVRNU3NxSE9Nc2dMbnMrQ2tWQlFFTnY5Mm16L3ppRFVJVHlzcUJLbTZKQ0RnR1JFSTM3cnF2OHVHUDFYL2VSZHBqb1FjL3ZoTGdxOURLdjErcXI2a3M1UkdtUDNMSHY3RHZOanhUUC9ZOFgrZy96dFpodTkzSjBEZWpJWjlpS2xOSlJ4QWthUW1nbGJ4eVoyRW50OW5xdEFOdkdTU0dTRWJIUWM0Tnp0dTZ4OXlkcHJRSTFoeE1jYnp5QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e57aa93c-5399-4458-b421-bc8c78c0d098", "record_id": "flaws_cloudtrail:0000530:e57aa93c-5399-4458-b421-bc8c78c0d098", "row_index": 530, "timestamp": "2019-07-23T06:12:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e57aa93c-5399-4458-b421-bc8c78c0d098", "eventTime": "2019-07-23T06:12:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4YkJOV2hpenkzNzIrRlpROERJYVRNU3NxSE9Nc2dMbnMrQ2tWQlFFTnY5Mm16L3ppRFVJVHlzcUJLbTZKQ0RnR1JFSTM3cnF2OHVHUDFYL2VSZHBqb1FjL3ZoTGdxOURLdjErcXI2a3M1UkdtUDNMSHY3RHZOanhUUC9ZOFgrZy96dFpodTkzSjBEZWpJWjlpS2xOSlJ4QWthUW1nbGJ4eVoyRW50OW5xdEFOdkdTU0dTRWJIUWM0Tnp0dTZ4OXlkcHJRSTFoeE1jYnp5QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "133b45fb-167b-425d-a542-3901cc585ce0", "record_id": "flaws_cloudtrail:0000531:133b45fb-167b-425d-a542-3901cc585ce0", "row_index": 531, "timestamp": "2019-07-23T06:12:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "133b45fb-167b-425d-a542-3901cc585ce0", "eventTime": "2019-07-23T06:12:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvdE9zaG1qejEveWFyV21meUdTb2FVM0phTUxRTmtiNkU5aFBRbkd3OHdxcGR5L244eDI2VHdoSHVSdFVaenl2eEorN25FS3Q5d2E2dWwzQlJydGpMY1FNZHg1TytBM3pZVnptQS95VGdKT0EwaENHeTM0Y1YyUWEyY1Uwazl4VmFmYVYwTDRtTG92TkhFWGI1RTR1YjdFdEYvVUJNc0JEVnZmTjQyYWwzOFQwUTBUU1UwVENXdW5iWTdwRFIvRmE5R2ozY1ZKbVlXdCt0QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "133b45fb-167b-425d-a542-3901cc585ce0", "record_id": "flaws_cloudtrail:0000532:133b45fb-167b-425d-a542-3901cc585ce0", "row_index": 532, "timestamp": "2019-07-23T06:12:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "133b45fb-167b-425d-a542-3901cc585ce0", "eventTime": "2019-07-23T06:12:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvdE9zaG1qejEveWFyV21meUdTb2FVM0phTUxRTmtiNkU5aFBRbkd3OHdxcGR5L244eDI2VHdoSHVSdFVaenl2eEorN25FS3Q5d2E2dWwzQlJydGpMY1FNZHg1TytBM3pZVnptQS95VGdKT0EwaENHeTM0Y1YyUWEyY1Uwazl4VmFmYVYwTDRtTG92TkhFWGI1RTR1YjdFdEYvVUJNc0JEVnZmTjQyYWwzOFQwUTBUU1UwVENXdW5iWTdwRFIvRmE5R2ozY1ZKbVlXdCt0QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "433140fd-d80f-438a-901d-92e71ce5c655", "record_id": "flaws_cloudtrail:0000533:433140fd-d80f-438a-901d-92e71ce5c655", "row_index": 533, "timestamp": "2019-07-23T06:12:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "433140fd-d80f-438a-901d-92e71ce5c655", "eventTime": "2019-07-23T06:12:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMWHNETHEreitBVkk0UU4yUVhsQ2NaNnlHenhhblIzTGhHSnQxTlFIa2QybUVKVXlmOWd6ZTR3U0Q0a2grOWMwdUdNQWdUbDZ4NGRCbVRVZ00wRE1mMEhpNWxsV2JZTWVaZTVmR2hPWUhRWThrMHdzeVFxWmVLSTdKVDg4UHlJekpBQmZlZkN5anQvaGVHVy9Tb0ZSY3lhN21CbVM3bG43UUZaQmJ6RlliSC8yMldyVlkxUDQvZXhvTjFrc3A1SVozMzdLMTBxNzRqSHIvUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "433140fd-d80f-438a-901d-92e71ce5c655", "record_id": "flaws_cloudtrail:0000534:433140fd-d80f-438a-901d-92e71ce5c655", "row_index": 534, "timestamp": "2019-07-23T06:12:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "433140fd-d80f-438a-901d-92e71ce5c655", "eventTime": "2019-07-23T06:12:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMWHNETHEreitBVkk0UU4yUVhsQ2NaNnlHenhhblIzTGhHSnQxTlFIa2QybUVKVXlmOWd6ZTR3U0Q0a2grOWMwdUdNQWdUbDZ4NGRCbVRVZ00wRE1mMEhpNWxsV2JZTWVaZTVmR2hPWUhRWThrMHdzeVFxWmVLSTdKVDg4UHlJekpBQmZlZkN5anQvaGVHVy9Tb0ZSY3lhN21CbVM3bG43UUZaQmJ6RlliSC8yMldyVlkxUDQvZXhvTjFrc3A1SVozMzdLMTBxNzRqSHIvUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90827-fb87-4f8b-a52f-3fa314b00808", "record_id": "flaws_cloudtrail:0000535:90827-fb87-4f8b-a52f-3fa314b00808", "row_index": 535, "timestamp": "2019-07-23T06:12:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90827-fb87-4f8b-a52f-3fa314b00808", "eventTime": "2019-07-23T06:12:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhdlFtdzNHcEV4bGFBT1ljeWRnTUMxTi9vWmcxdUdyaFAycG5kVUFpQ09sTVRUcUpNTkh4S0o2bHE4ajVBc2lodU1lOGxlZXNqV09IVllycG13SXBLYVRnRVlQZll1NENjRWdNZVhKamVZdXcvU1l6eGhva1FQcjQralo1RDVibEx1eGNVQlB1STZOa3JpZ2Zta2VMOFlCak82N3IzZllKUFUyUzJQZGV2NXJDT0xKSVdKZW9GL1lWSnExRFVKa1ZJRG1QZWl1RXNzQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90827-fb87-4f8b-a52f-3fa314b00808", "record_id": "flaws_cloudtrail:0000536:90827-fb87-4f8b-a52f-3fa314b00808", "row_index": 536, "timestamp": "2019-07-23T06:12:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90827-fb87-4f8b-a52f-3fa314b00808", "eventTime": "2019-07-23T06:12:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhdlFtdzNHcEV4bGFBT1ljeWRnTUMxTi9vWmcxdUdyaFAycG5kVUFpQ09sTVRUcUpNTkh4S0o2bHE4ajVBc2lodU1lOGxlZXNqV09IVllycG13SXBLYVRnRVlQZll1NENjRWdNZVhKamVZdXcvU1l6eGhva1FQcjQralo1RDVibEx1eGNVQlB1STZOa3JpZ2Zta2VMOFlCak82N3IzZllKUFUyUzJQZGV2NXJDT0xKSVdKZW9GL1lWSnExRFVKa1ZJRG1QZWl1RXNzQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc76901a-e709-4048-a16e-26802491f7ad", "record_id": "flaws_cloudtrail:0000537:bc76901a-e709-4048-a16e-26802491f7ad", "row_index": 537, "timestamp": "2019-07-23T06:12:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc76901a-e709-4048-a16e-26802491f7ad", "eventTime": "2019-07-23T06:12:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTWk9nTmpKZTVURXRyN3ZpNHhacGRuUkxNWWszTXdGNzI4NEFvT3BXdCtKUncxdDBtTjU1L0xOSEFuT25IbE04RytXYndRQW93Nk5Jcm1tbEFvTjhGM2xwRzNDaUNER3JUUmQ3cnkwUG00Zzg3K3NwWFhrM0FZajQ2R3lLVnh6anZkamNOMjZoWDhCSy9GUEx1NnpDTWdHNXlpOXlQWkU3ZVAzdGE2V0tiT2F0SG9rWWF2Rk9VTUlaMm1DOGRnQ0tUN1k1VFFQVnRBST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc76901a-e709-4048-a16e-26802491f7ad", "record_id": "flaws_cloudtrail:0000538:bc76901a-e709-4048-a16e-26802491f7ad", "row_index": 538, "timestamp": "2019-07-23T06:12:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc76901a-e709-4048-a16e-26802491f7ad", "eventTime": "2019-07-23T06:12:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTWk9nTmpKZTVURXRyN3ZpNHhacGRuUkxNWWszTXdGNzI4NEFvT3BXdCtKUncxdDBtTjU1L0xOSEFuT25IbE04RytXYndRQW93Nk5Jcm1tbEFvTjhGM2xwRzNDaUNER3JUUmQ3cnkwUG00Zzg3K3NwWFhrM0FZajQ2R3lLVnh6anZkamNOMjZoWDhCSy9GUEx1NnpDTWdHNXlpOXlQWkU3ZVAzdGE2V0tiT2F0SG9rWWF2Rk9VTUlaMm1DOGRnQ0tUN1k1VFFQVnRBST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb296a34-51f7-4d5c-923b-706378a6a220", "record_id": "flaws_cloudtrail:0000539:eb296a34-51f7-4d5c-923b-706378a6a220", "row_index": 539, "timestamp": "2019-07-23T06:12:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb296a34-51f7-4d5c-923b-706378a6a220", "eventTime": "2019-07-23T06:12:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKek8vRTJVN1daYjhaMjhmQUN3VkhWcW0wZllLd2MzNDJWYzFqK29yNklKTWZxeDFHKzcyZTZEdHR0dC9wd01sRTN5Y1RQV1J4ZkMxUFhZU2ZrV3BBbTNkb3J6R0ZUN0xWTmpFRzEzemdhRXNlbHpzSkg5bFF2bE1BcTllS2diUis0Y2N5c25TZ29iQVBkZncvYnJVSVBZZHZRNTkwM3kvSjN5S0NXMExmVVdOQytLOTI4djZNRkg3NGZkQmRJWDhVc3ZFNmtjUzdEbTFrL0hnSDZMd25oNTZUc0dtR0E4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb296a34-51f7-4d5c-923b-706378a6a220", "record_id": "flaws_cloudtrail:0000540:eb296a34-51f7-4d5c-923b-706378a6a220", "row_index": 540, "timestamp": "2019-07-23T06:12:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb296a34-51f7-4d5c-923b-706378a6a220", "eventTime": "2019-07-23T06:12:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKek8vRTJVN1daYjhaMjhmQUN3VkhWcW0wZllLd2MzNDJWYzFqK29yNklKTWZxeDFHKzcyZTZEdHR0dC9wd01sRTN5Y1RQV1J4ZkMxUFhZU2ZrV3BBbTNkb3J6R0ZUN0xWTmpFRzEzemdhRXNlbHpzSkg5bFF2bE1BcTllS2diUis0Y2N5c25TZ29iQVBkZncvYnJVSVBZZHZRNTkwM3kvSjN5S0NXMExmVVdOQytLOTI4djZNRkg3NGZkQmRJWDhVc3ZFNmtjUzdEbTFrL0hnSDZMd25oNTZUc0dtR0E4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4897fc9c-4a9c-4de5-8644-24c7008bf4d2", "record_id": "flaws_cloudtrail:0000541:4897fc9c-4a9c-4de5-8644-24c7008bf4d2", "row_index": 541, "timestamp": "2019-07-23T06:12:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4897fc9c-4a9c-4de5-8644-24c7008bf4d2", "eventTime": "2019-07-23T06:12:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYRmF1dFJRNThiemNGNWgwakd2eitHdUhIZWw4MTlONFBvdm93ZWJTaVhKb3hHRW42RWJ5NlAvaXZPaTgxSVBEVm5oUFhjRGYzN2hndWZ4NmZhdFZEZjJ4ZENmeVlxUGUxeEdxNjNSUkFHOFhqN0UrN1lCU0U5dFE1ZC9jVk5uNTFxYi9VWG0yakRteGFtOEpXN1ByTnp5bk1WeVpCbEEvdFdnVFRaanB1SjBjeGYxNHpGNTBtOGg3OC9aazdwaWpWZ2NSbm9OcGpybDRyaVl6enh5dHlRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4897fc9c-4a9c-4de5-8644-24c7008bf4d2", "record_id": "flaws_cloudtrail:0000542:4897fc9c-4a9c-4de5-8644-24c7008bf4d2", "row_index": 542, "timestamp": "2019-07-23T06:12:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4897fc9c-4a9c-4de5-8644-24c7008bf4d2", "eventTime": "2019-07-23T06:12:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYRmF1dFJRNThiemNGNWgwakd2eitHdUhIZWw4MTlONFBvdm93ZWJTaVhKb3hHRW42RWJ5NlAvaXZPaTgxSVBEVm5oUFhjRGYzN2hndWZ4NmZhdFZEZjJ4ZENmeVlxUGUxeEdxNjNSUkFHOFhqN0UrN1lCU0U5dFE1ZC9jVk5uNTFxYi9VWG0yakRteGFtOEpXN1ByTnp5bk1WeVpCbEEvdFdnVFRaanB1SjBjeGYxNHpGNTBtOGg3OC9aazdwaWpWZ2NSbm9OcGpybDRyaVl6enh5dHlRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f884ea1f-5e8c-4497-8026-298619451172", "record_id": "flaws_cloudtrail:0000543:f884ea1f-5e8c-4497-8026-298619451172", "row_index": 543, "timestamp": "2019-07-23T06:12:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f884ea1f-5e8c-4497-8026-298619451172", "eventTime": "2019-07-23T06:12:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjem5WUzhZWTlzL0lvYU9pMWtUTjFBNlNYTC9HbGdxTHNnVUxjVE9OVE1jbEx5MGVabmhTOXNpQWJtRWRsdklCMlBBakszZDdZcUovNzlEWS9IZkZyQmJ6K2d0MXRPR2tMa21CbTNHREYxb0JacTJTTzZ0YWFNd1JxckRYUzk3c0JwRGQxc2tmRUMvUkNHakszZSt1aUJpUGs3ZmVoaGo5UXUxRG1leXc3WjRFY2hiS0JTK3NzYlJJK0x1VGRQNE4yay9KeW1FWlJoVS95dWo0eEJFU1YxdHR6YkNxQ3VZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f884ea1f-5e8c-4497-8026-298619451172", "record_id": "flaws_cloudtrail:0000544:f884ea1f-5e8c-4497-8026-298619451172", "row_index": 544, "timestamp": "2019-07-23T06:12:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f884ea1f-5e8c-4497-8026-298619451172", "eventTime": "2019-07-23T06:12:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjem5WUzhZWTlzL0lvYU9pMWtUTjFBNlNYTC9HbGdxTHNnVUxjVE9OVE1jbEx5MGVabmhTOXNpQWJtRWRsdklCMlBBakszZDdZcUovNzlEWS9IZkZyQmJ6K2d0MXRPR2tMa21CbTNHREYxb0JacTJTTzZ0YWFNd1JxckRYUzk3c0JwRGQxc2tmRUMvUkNHakszZSt1aUJpUGs3ZmVoaGo5UXUxRG1leXc3WjRFY2hiS0JTK3NzYlJJK0x1VGRQNE4yay9KeW1FWlJoVS95dWo0eEJFU1YxdHR6YkNxQ3VZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f01bfbf1-60cf-4fa6-ae65-8a53e852b96f", "record_id": "flaws_cloudtrail:0000545:f01bfbf1-60cf-4fa6-ae65-8a53e852b96f", "row_index": 545, "timestamp": "2019-07-23T06:12:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f01bfbf1-60cf-4fa6-ae65-8a53e852b96f", "eventTime": "2019-07-23T06:12:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwT1pOVFZ0VGNxNDY2dURyWEp0NDZ3RExzU2cwZy9RSDN2RGZhSXpSRXc2a0xBYWFvdkJqWmtzVXVnMGtGNWxpUU5FSm42UmhjOGFNYTEvSzBybGRxS1RiTVQ3TWJHV1BCVVZHOW5HVE5LRCt2eStrU0xmV3BKS1VjZG1URkdZcEZOT2FnbTlVenE4dlNrRkdENDJjSGxyajNlQWJTZnFFV3BGL0lUbXdPS3JNWFhqZ2lrUDRkQ3NvOVE1Z3dDTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f01bfbf1-60cf-4fa6-ae65-8a53e852b96f", "record_id": "flaws_cloudtrail:0000546:f01bfbf1-60cf-4fa6-ae65-8a53e852b96f", "row_index": 546, "timestamp": "2019-07-23T06:12:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f01bfbf1-60cf-4fa6-ae65-8a53e852b96f", "eventTime": "2019-07-23T06:12:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwT1pOVFZ0VGNxNDY2dURyWEp0NDZ3RExzU2cwZy9RSDN2RGZhSXpSRXc2a0xBYWFvdkJqWmtzVXVnMGtGNWxpUU5FSm42UmhjOGFNYTEvSzBybGRxS1RiTVQ3TWJHV1BCVVZHOW5HVE5LRCt2eStrU0xmV3BKS1VjZG1URkdZcEZOT2FnbTlVenE4dlNrRkdENDJjSGxyajNlQWJTZnFFV3BGL0lUbXdPS3JNWFhqZ2lrUDRkQ3NvOVE1Z3dDTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36ac9f54-ada4-45b3-a0a8-eee8bce8436e", "record_id": "flaws_cloudtrail:0000547:36ac9f54-ada4-45b3-a0a8-eee8bce8436e", "row_index": 547, "timestamp": "2019-07-23T06:12:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36ac9f54-ada4-45b3-a0a8-eee8bce8436e", "eventTime": "2019-07-23T06:12:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJaWhMSk9MYm1WZndFWUJ0ZlZOODlXV0FEeVBtSm5ObHV3R3VHT0pnMDZ5R29ZVGEwRWUyQ2x1UTlQQ0FRLzBKZEN6RENvMkZUVDlidWxMdExybDZjNXJ5cFRhMWl4T0E0VVdQNjRwYjMrdWNqTU0yd1hIMDNjaWttcFZicGU4T3hYSWIxdkFCdGJWK0pvNTh2aERsdHpjeEt5ZnIwbWZEVlFYcWx3eUhCVU5XYnlPN092UG8zaHhaYy8rYUJwYlp1cUp0V0QyYWl6SlNMYnFnamo4eHJHRlB0VFNjc2U4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36ac9f54-ada4-45b3-a0a8-eee8bce8436e", "record_id": "flaws_cloudtrail:0000548:36ac9f54-ada4-45b3-a0a8-eee8bce8436e", "row_index": 548, "timestamp": "2019-07-23T06:12:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36ac9f54-ada4-45b3-a0a8-eee8bce8436e", "eventTime": "2019-07-23T06:12:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJJaWhMSk9MYm1WZndFWUJ0ZlZOODlXV0FEeVBtSm5ObHV3R3VHT0pnMDZ5R29ZVGEwRWUyQ2x1UTlQQ0FRLzBKZEN6RENvMkZUVDlidWxMdExybDZjNXJ5cFRhMWl4T0E0VVdQNjRwYjMrdWNqTU0yd1hIMDNjaWttcFZicGU4T3hYSWIxdkFCdGJWK0pvNTh2aERsdHpjeEt5ZnIwbWZEVlFYcWx3eUhCVU5XYnlPN092UG8zaHhaYy8rYUJwYlp1cUp0V0QyYWl6SlNMYnFnamo4eHJHRlB0VFNjc2U4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "746f3702-fb3b-4229-9f5c-1d03be8972d5", "record_id": "flaws_cloudtrail:0000549:746f3702-fb3b-4229-9f5c-1d03be8972d5", "row_index": 549, "timestamp": "2019-07-23T06:12:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "746f3702-fb3b-4229-9f5c-1d03be8972d5", "eventTime": "2019-07-23T06:12:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlbWUySEZtM2R0NE9uUDB4NmtDY2FBTFV1LzVkeW1hcG8vYm0rZnhXWVRHdko3KzkrczlBU3JyNlo3bXFUTlJRZ3lIWGNJNXBRZENGNmR4RUFveDNQNjUwVzZYZW9jUEVJenpJNnltS2VzYk1YOFovUGY5eGZMZCtHRHZWdEdDRldsKzVDUXdsUlVoWG1SUDM5L3NrSVZRcnUvRXRwRlJ1SnFVZkdQSjI2ZDZSdjJuLzUrZW1HTUVzcHpsd0NOQVZoclVDMEVGdE1pOG1oUUFhamM2NGJBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "746f3702-fb3b-4229-9f5c-1d03be8972d5", "record_id": "flaws_cloudtrail:0000550:746f3702-fb3b-4229-9f5c-1d03be8972d5", "row_index": 550, "timestamp": "2019-07-23T06:12:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "746f3702-fb3b-4229-9f5c-1d03be8972d5", "eventTime": "2019-07-23T06:12:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlbWUySEZtM2R0NE9uUDB4NmtDY2FBTFV1LzVkeW1hcG8vYm0rZnhXWVRHdko3KzkrczlBU3JyNlo3bXFUTlJRZ3lIWGNJNXBRZENGNmR4RUFveDNQNjUwVzZYZW9jUEVJenpJNnltS2VzYk1YOFovUGY5eGZMZCtHRHZWdEdDRldsKzVDUXdsUlVoWG1SUDM5L3NrSVZRcnUvRXRwRlJ1SnFVZkdQSjI2ZDZSdjJuLzUrZW1HTUVzcHpsd0NOQVZoclVDMEVGdE1pOG1oUUFhamM2NGJBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6f24d84-72b1-4f89-86cf-852332512785", "record_id": "flaws_cloudtrail:0000551:b6f24d84-72b1-4f89-86cf-852332512785", "row_index": 551, "timestamp": "2019-07-23T06:12:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6f24d84-72b1-4f89-86cf-852332512785", "eventTime": "2019-07-23T06:12:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXaEVNalkrZjIreGZ3VDkyNzEyUnY0eW5xSHVmcU93OTJ1T1RsbldRY25FR3BHdzJHSEJxeW1PRFZJczZrQUt5c3JwaTRkZTJXVXBGR2l2aURzcVlTeWNNaWdmSEF1ZEQrYzloMGRPMk5yZUM4MjNaY200R0MrUVU2Tm9qNUhqUEEyQnFTQU1hSFNLT0ZpNDRtSzBpQTNvNmgvUHNvTnVOQ2VSMEJUVklxWTFiWngrSDhTbGYzbXdPODB2NUpjekdMaFQrTllOZ05NOW5rRk01TEhIUmRiOHppb2k0REJrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6f24d84-72b1-4f89-86cf-852332512785", "record_id": "flaws_cloudtrail:0000552:b6f24d84-72b1-4f89-86cf-852332512785", "row_index": 552, "timestamp": "2019-07-23T06:12:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6f24d84-72b1-4f89-86cf-852332512785", "eventTime": "2019-07-23T06:12:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXaEVNalkrZjIreGZ3VDkyNzEyUnY0eW5xSHVmcU93OTJ1T1RsbldRY25FR3BHdzJHSEJxeW1PRFZJczZrQUt5c3JwaTRkZTJXVXBGR2l2aURzcVlTeWNNaWdmSEF1ZEQrYzloMGRPMk5yZUM4MjNaY200R0MrUVU2Tm9qNUhqUEEyQnFTQU1hSFNLT0ZpNDRtSzBpQTNvNmgvUHNvTnVOQ2VSMEJUVklxWTFiWngrSDhTbGYzbXdPODB2NUpjekdMaFQrTllOZ05NOW5rRk01TEhIUmRiOHppb2k0REJrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8653a0e3-5387-4d58-8dda-839a8ee0bdfb", "record_id": "flaws_cloudtrail:0000553:8653a0e3-5387-4d58-8dda-839a8ee0bdfb", "row_index": 553, "timestamp": "2019-07-23T06:13:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8653a0e3-5387-4d58-8dda-839a8ee0bdfb", "eventTime": "2019-07-23T06:13:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxNHZGZnpxeFhQQ1ZqOGJIT0VzNVZleWVRYjZVZEtkTHBoMWZnU1l6RFhmQTFKUEl5V2ZDL3o2THRLN3Y4N0RKaHkxVXVFN01YRXB5dFJ4amdHNldGcTVQc3BuTmtrZ1F2QVEyRUhhVXpjK2pDQXIvd3dqTkpxSU9EaEJ2TExmNzhraVFqZXpKVkZiYk53dFV2bEZySEhiOFhrVmgxcVRISVBKQlNvNXc2cDlqQWZYZmMxSU5qSWpiT3MrOU52ZDBPYmg4eFJSOVpteE1BTjBtdWJnOTJ3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8653a0e3-5387-4d58-8dda-839a8ee0bdfb", "record_id": "flaws_cloudtrail:0000554:8653a0e3-5387-4d58-8dda-839a8ee0bdfb", "row_index": 554, "timestamp": "2019-07-23T06:13:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8653a0e3-5387-4d58-8dda-839a8ee0bdfb", "eventTime": "2019-07-23T06:13:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxNHZGZnpxeFhQQ1ZqOGJIT0VzNVZleWVRYjZVZEtkTHBoMWZnU1l6RFhmQTFKUEl5V2ZDL3o2THRLN3Y4N0RKaHkxVXVFN01YRXB5dFJ4amdHNldGcTVQc3BuTmtrZ1F2QVEyRUhhVXpjK2pDQXIvd3dqTkpxSU9EaEJ2TExmNzhraVFqZXpKVkZiYk53dFV2bEZySEhiOFhrVmgxcVRISVBKQlNvNXc2cDlqQWZYZmMxSU5qSWpiT3MrOU52ZDBPYmg4eFJSOVpteE1BTjBtdWJnOTJ3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58d3da16-2387-4fcf-9010-e6af081d0a91", "record_id": "flaws_cloudtrail:0000555:58d3da16-2387-4fcf-9010-e6af081d0a91", "row_index": 555, "timestamp": "2019-07-23T06:13:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58d3da16-2387-4fcf-9010-e6af081d0a91", "eventTime": "2019-07-23T06:13:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVSnBWQ0Q5enhsQnUwVzBuaEo5WjNzeGhsM2FGYVY1S0NBVEZSVENVMG1aOXV2b1ExOHZZU1ZrRjVVSzF1Und5WDFsQTAxY0pxWForVVZhQ2JiQzdYdnhWMGtodmowMWlMc0ZpNnhKUnZHenhGZ2xIRkNBZ1R3MkwrQnk0VXVPT0VRRk1rL1NQd3VYdkJEZjg3dlNvZmRtOXJ6dmFxRGRIejdpVDFpT3VJUnljbGlTV0ZncmxrUTUyRStjbHhtTXBHS1lsRUxSN0RiRzU1VVByVTRRMm8xS1FpdVRNdFlZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58d3da16-2387-4fcf-9010-e6af081d0a91", "record_id": "flaws_cloudtrail:0000556:58d3da16-2387-4fcf-9010-e6af081d0a91", "row_index": 556, "timestamp": "2019-07-23T06:13:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58d3da16-2387-4fcf-9010-e6af081d0a91", "eventTime": "2019-07-23T06:13:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVSnBWQ0Q5enhsQnUwVzBuaEo5WjNzeGhsM2FGYVY1S0NBVEZSVENVMG1aOXV2b1ExOHZZU1ZrRjVVSzF1Und5WDFsQTAxY0pxWForVVZhQ2JiQzdYdnhWMGtodmowMWlMc0ZpNnhKUnZHenhGZ2xIRkNBZ1R3MkwrQnk0VXVPT0VRRk1rL1NQd3VYdkJEZjg3dlNvZmRtOXJ6dmFxRGRIejdpVDFpT3VJUnljbGlTV0ZncmxrUTUyRStjbHhtTXBHS1lsRUxSN0RiRzU1VVByVTRRMm8xS1FpdVRNdFlZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0725fa05-a798-48bd-81cb-bb9ee8a9122f", "record_id": "flaws_cloudtrail:0000557:0725fa05-a798-48bd-81cb-bb9ee8a9122f", "row_index": 557, "timestamp": "2019-07-23T06:13:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0725fa05-a798-48bd-81cb-bb9ee8a9122f", "eventTime": "2019-07-23T06:13:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuZ0VyUDhTL21mZ1crWUFpZnRxbmpjV3cxQ0swZkhMRUNIMHUwMlF3K2oxT093UDQyS3VweDdCU2liSkRqVW5ia2NDZTlIOWZjOWtKVElhTDNjV25lbW1TaXV6dEJvcXRxRHgzc2Z2RmJpb1J3dVpQUndTMVU4ZnRuMEZBWHp1RWNsNFBZckkxWXlKc1k0Z3BVVVJqcTFvend2TmwzaUlaL0ZrNkdhYVJoWDh0bXFuNEhubTk5cUg3T093VXAwcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0725fa05-a798-48bd-81cb-bb9ee8a9122f", "record_id": "flaws_cloudtrail:0000558:0725fa05-a798-48bd-81cb-bb9ee8a9122f", "row_index": 558, "timestamp": "2019-07-23T06:13:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0725fa05-a798-48bd-81cb-bb9ee8a9122f", "eventTime": "2019-07-23T06:13:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuZ0VyUDhTL21mZ1crWUFpZnRxbmpjV3cxQ0swZkhMRUNIMHUwMlF3K2oxT093UDQyS3VweDdCU2liSkRqVW5ia2NDZTlIOWZjOWtKVElhTDNjV25lbW1TaXV6dEJvcXRxRHgzc2Z2RmJpb1J3dVpQUndTMVU4ZnRuMEZBWHp1RWNsNFBZckkxWXlKc1k0Z3BVVVJqcTFvend2TmwzaUlaL0ZrNkdhYVJoWDh0bXFuNEhubTk5cUg3T093VXAwcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c97378-88f8-40fb-804a-33a9ad54ee09", "record_id": "flaws_cloudtrail:0000559:7c97378-88f8-40fb-804a-33a9ad54ee09", "row_index": 559, "timestamp": "2019-07-23T06:13:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c97378-88f8-40fb-804a-33a9ad54ee09", "eventTime": "2019-07-23T06:13:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c97378-88f8-40fb-804a-33a9ad54ee09", "record_id": "flaws_cloudtrail:0000560:7c97378-88f8-40fb-804a-33a9ad54ee09", "row_index": 560, "timestamp": "2019-07-23T06:13:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "217.46.253.11", "user_agent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c97378-88f8-40fb-804a-33a9ad54ee09", "eventTime": "2019-07-23T06:13:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "217.46.253.11", "userAgent": "aws-cli/1.16.169 Python/3.6.7 Linux/4.18.0-25-generic botocore/1.12.159", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cebcdd6a-975c-4b60-b343-e15915a9e3b7", "record_id": "flaws_cloudtrail:0000561:cebcdd6a-975c-4b60-b343-e15915a9e3b7", "row_index": 561, "timestamp": "2019-07-23T06:20:16Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cebcdd6a-975c-4b60-b343-e15915a9e3b7", "eventTime": "2019-07-23T06:20:16Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cebcdd6a-975c-4b60-b343-e15915a9e3b7", "record_id": "flaws_cloudtrail:0000562:cebcdd6a-975c-4b60-b343-e15915a9e3b7", "row_index": 562, "timestamp": "2019-07-23T06:20:16Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cebcdd6a-975c-4b60-b343-e15915a9e3b7", "eventTime": "2019-07-23T06:20:16Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c071422-2b5e-492b-bec7-e17336a70d07", "record_id": "flaws_cloudtrail:0000563:7c071422-2b5e-492b-bec7-e17336a70d07", "row_index": 563, "timestamp": "2019-07-23T06:20:41Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c071422-2b5e-492b-bec7-e17336a70d07", "eventTime": "2019-07-23T06:20:41Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c071422-2b5e-492b-bec7-e17336a70d07", "record_id": "flaws_cloudtrail:0000564:7c071422-2b5e-492b-bec7-e17336a70d07", "row_index": 564, "timestamp": "2019-07-23T06:20:41Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c071422-2b5e-492b-bec7-e17336a70d07", "eventTime": "2019-07-23T06:20:41Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e160136-4bb1-48fd-aadf-8e82214366af", "record_id": "flaws_cloudtrail:0000565:e160136-4bb1-48fd-aadf-8e82214366af", "row_index": 565, "timestamp": "2019-07-23T06:21:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1935, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e160136-4bb1-48fd-aadf-8e82214366af", "eventTime": "2019-07-23T06:21:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAS904LJLX884AZES3", "expiration": "Jul 23, 2019 7:21:57 AM", "sessionToken": "AgoJb3JpZ2luX2VjEGcaCXVzLXdlc3QtMiJHMEUCIQCEPf9o45a3FvCsf8HxPWNAPgI/ySFMQarhPHqLifSUZwIgb5CzoFuQqKQm8eX13rFhi6uI/wZ0CFWmp3ybfVvRftcq8QII0P//////////ARAAGgw5NzU0MjYyNjIwMjkiDIFIXQbCUjqClV0v8yrFAsHoqW+M4yrbgR149N4Kl7Ag2KDQk6xrHF8fMVtgA1dSZUwN8cyoU4NhJBDVHcTVYZWIezJWZiJzmbIDbmpK1XyUqfJ1LFg5pvmd2yR2pVrVI2xAE6qtGRE+8gbc+3TIA/UQWCTWbg6Tg2V/NhJAhRYyJ8/lTvtX+s7+tDR3ciWhWUrx6rFYatwC9nGUwdt7fno+TEUbbVIAgKQiGBl9WRRGDq908PzAZft/9XyMWEmA1B9BiJKZzcFYFDnJoXmZHJT8FLaiHrUU9womnBmteNE+Jc8oiaXqeltGdj+Zx0qIoC0Fjwn/a27zANBLmrULF5/+9+iQlHpVSNgghEy6XnZrbBfU/4fPVoN8CQqDrruwoia7boWK9a+pXTp5w4aLMBniMJXzc9veCX4uFTBfq41a4Fc9r+NNclEQgMMCTIvlAFlPD9swhc/a6QU6tAFTA8yL1twTxJdp9/5E+4WTeuaD+OjpHLl44MLX02t7H69CqjNzkwNGGybn3xuMnQCInM9mxqGSrNMq57+OMwjNLjMITa4eX2EfK+dI0rJ386WS7Vf1Kb/rMH3lPB3wftRV5mE89DubbcuZFHLPvwGytTHUkeIwRbUrojt9udZS3myQ5BAaT+jonR4MGMRZeG2HE5GdB06wabJP+DDF8ypNQZPdYgYWUbDT5DAwnHOaVJHcUKw="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e160136-4bb1-48fd-aadf-8e82214366af", "record_id": "flaws_cloudtrail:0000566:e160136-4bb1-48fd-aadf-8e82214366af", "row_index": 566, "timestamp": "2019-07-23T06:21:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1935, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e160136-4bb1-48fd-aadf-8e82214366af", "eventTime": "2019-07-23T06:21:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAS904LJLX884AZES3", "expiration": "Jul 23, 2019 7:21:57 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69f60057-8645-42f5-9b71-4cd2af5cb3be", "record_id": "flaws_cloudtrail:0000567:69f60057-8645-42f5-9b71-4cd2af5cb3be", "row_index": 567, "timestamp": "2019-07-23T06:26:39Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69f60057-8645-42f5-9b71-4cd2af5cb3be", "eventTime": "2019-07-23T06:26:39Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountSummary on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69f60057-8645-42f5-9b71-4cd2af5cb3be", "record_id": "flaws_cloudtrail:0000568:69f60057-8645-42f5-9b71-4cd2af5cb3be", "row_index": 568, "timestamp": "2019-07-23T06:26:39Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69f60057-8645-42f5-9b71-4cd2af5cb3be", "eventTime": "2019-07-23T06:26:39Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountSummary on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a4d97ed-ef8a-4fd0-8e47-54eee2e5dba3", "record_id": "flaws_cloudtrail:0000569:5a4d97ed-ef8a-4fd0-8e47-54eee2e5dba3", "row_index": 569, "timestamp": "2019-07-23T06:29:58Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a4d97ed-ef8a-4fd0-8e47-54eee2e5dba3", "eventTime": "2019-07-23T06:29:58Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListAccountAliases on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a4d97ed-ef8a-4fd0-8e47-54eee2e5dba3", "record_id": "flaws_cloudtrail:0000570:5a4d97ed-ef8a-4fd0-8e47-54eee2e5dba3", "row_index": 570, "timestamp": "2019-07-23T06:29:58Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.254.250.215", "user_agent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a4d97ed-ef8a-4fd0-8e47-54eee2e5dba3", "eventTime": "2019-07-23T06:29:58Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.254.250.215", "userAgent": "aws-cli/1.16.113 Python/3.7.4 Linux/4.9.125-linuxkit botocore/1.12.103", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListAccountAliases on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3de549da-dab1-4bda-ac09-3ef6f6d4d30c", "record_id": "flaws_cloudtrail:0000571:3de549da-dab1-4bda-ac09-3ef6f6d4d30c", "row_index": 571, "timestamp": "2019-07-23T06:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3de549da-dab1-4bda-ac09-3ef6f6d4d30c", "eventTime": "2019-07-23T06:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXDGFCS5SWWDGJJPK", "expiration": "Jul 23, 2019 12:56:02 PM", "sessionToken": "AgoJb3JpZ2luX2VjEGcaCXVzLXdlc3QtMiJHMEUCIQCeCBx+f53fS2mIuC9vg7Q0LtNhtUqbhgcVqph1Mae7aAIgCb1yyVz+gfSQqnZNI6LrOe5eSZhjaAvIboE5e1u1A44q4wMI0P//////////ARAAGgw5NzU0MjYyNjIwMjkiDDiYI7Lq+7e+rpRhnSq3A9SNuO17caFbgJ1UIB6W+Xnd+Sf+zxw5orEHITtvzFl/kp7f3bF2ay30J+DgrveVos+wF5tBtl8iQKAumtCJYR9P20D6B8/snneI9abWm7qFYsCaMPA4hdvURH9N+/DpCEORC7jMBqeSeVRgdIMQ9j0+lAcHZ/bWgZLO88rp9/sT0J8GZf7dQDdlX5FPCATobx9auAUHGXKC35afhCBBT4wMmg6WHVlyovLKjH6Ntweo8HpsFKSDNMvEM+fgVG5WVWOYPK9kiiwmyWA+/KpC6JYa81j/TFm8eVh7Yw9famycEy3lY1LGFy0lMG5CT+bm9ECDUA7jgXVKrhJdYY8b1NEtkYyeWsNLdktchGcW1lnWddXMRaDUCWQ6tz/3T68mXjhbIwtk/95V9jUVgSisFl4yDEJTO6ZTt+batJi/14+Tf1fszzw9EYXO3Tq5KDKJto0wwBxtiQyFmyJKhGmh/cnEpuR/CzPrIue1S+MebypO+gNlugAFTdlfblROf6FL4bTuxTM1chm9hslS2OQyYjAjJwWNuFN9LElJyFCnVoAb6hzB0oodbN/G4TZlOoWHnnbrl4nZmrUwu9Pa6QU6tAHS+uFXuswWhb3m9rxsg7ei5L+HfH0ZFpARzo1ytGlA6MVyyvNRdhSIghJZaTh4B+UPJ8xPoFU4SzRhW5RsGR81iS22s7IYrD5K9N0mN576aM40Kc3mD5kVTl2XdbitX7GLbASChT1S9AA15SMWEPTzGlAqpPOsEYd7PWvdLrzOjJIjZto7FpdaesTs35vWF4NJGg3sWhk5cSmgzSz2SsifuoX3TKZ4OK5cpe3NkLDPAT7Cfm8="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3de549da-dab1-4bda-ac09-3ef6f6d4d30c", "record_id": "flaws_cloudtrail:0000572:3de549da-dab1-4bda-ac09-3ef6f6d4d30c", "row_index": 572, "timestamp": "2019-07-23T06:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3de549da-dab1-4bda-ac09-3ef6f6d4d30c", "eventTime": "2019-07-23T06:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXDGFCS5SWWDGJJPK", "expiration": "Jul 23, 2019 12:56:02 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2895ff44-1f43-454e-b48c-d4d7ecab5291", "record_id": "flaws_cloudtrail:0000573:2895ff44-1f43-454e-b48c-d4d7ecab5291", "row_index": 573, "timestamp": "2019-07-23T07:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2895ff44-1f43-454e-b48c-d4d7ecab5291", "eventTime": "2019-07-23T07:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAV6C5PDWNVS45ZWT0", "expiration": "Jul 23, 2019 1:33:53 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2895ff44-1f43-454e-b48c-d4d7ecab5291", "record_id": "flaws_cloudtrail:0000574:2895ff44-1f43-454e-b48c-d4d7ecab5291", "row_index": 574, "timestamp": "2019-07-23T07:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2895ff44-1f43-454e-b48c-d4d7ecab5291", "eventTime": "2019-07-23T07:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAV6C5PDWNVS45ZWT0", "expiration": "Jul 23, 2019 1:33:53 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee4ff1c1-4d50-448b-9515-da9585b7d640", "record_id": "flaws_cloudtrail:0000575:ee4ff1c1-4d50-448b-9515-da9585b7d640", "row_index": 575, "timestamp": "2019-07-23T08:15:04Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee4ff1c1-4d50-448b-9515-da9585b7d640", "eventTime": "2019-07-23T08:15:04Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIASIGUPMYEMS5SER4K", "expiration": "Jul 23, 2019 8:15:04 PM", "sessionToken": "AgoJb3JpZ2luX2VjEGgaCXVzLXdlc3QtMiJHMEUCIQCBralZMS5/V9Wg5ZR1VsTH23FY9rPNu4PBn8CdoHbWCQIgbEPYZtYiWI7hC2EQN32AbfyMFP1hSzq95Wy+2ZIVgMMqiwII0f//////////ARAAGgw5NzU0MjYyNjIwMjkiDL8f1ijQEvA81mVrvCrfAWBXS2xeFXdkYAdpMwLN7o0QUwOQlo+vpAonD7f8GGDTLt573jMjSn9YMto3UF9ZWVtcRPtRLvUTdpud6o7b5I3W8Tmx6/2YMADeUQeiShHI4gR2fXDrDF2E+9a25EU5cg+Ur0HhAPlqthhD1jLvN9whTgaCgrwfUmO8sGYtLx0qw9EYr56VHHPdiPX7wJdMWPpmn3Ak/sNCp6Rms8TmgybrSrRwy1RjaF8YDJOho4MfyLa1F2SL/hTdokIJYPw/eK49vmFt/IM810F8EJyL80N+s85IP+U5VHAljBxqBEMwiITb6QU6tAGEgHJ1DCFCTggf2fACvDOkBn+N0aIUlKI2Aixk2Yx34Uquf45GVkzb4tKN1othBJ9HxD0tUFJz+8qtDtzGDW1DmndFpE3NDPxmlDEunZLb07z5CeIvWq5VRxPxxg5pW5/lnQ6LaY/kGZUPU2F7tWlHH4GNBFYSXxtdo+vOdLD4wJHsZcQ+KMzQ0aEw3AQqfRm5Co+xHlWVPq+M9e8k9pcpucIwOv9XkB5xdW1T5eg0ZczrMaw="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e031596-3bdc-4b03-a25f-1c3bcbd00149", "record_id": "flaws_cloudtrail:0000576:6e031596-3bdc-4b03-a25f-1c3bcbd00149", "row_index": 576, "timestamp": "2019-07-23T08:15:04Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIASIGUPMYEMS5SER4K", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "115.250.206.254", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e031596-3bdc-4b03-a25f-1c3bcbd00149", "eventTime": "2019-07-23T08:15:04Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "115.250.206.254", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIASIGUPMYEMS5SER4K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-23T08:15:04Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/23/[$LATEST]e74683135867f6259decd1ed8bc12c0c"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c54a149-9ebc-423a-a0ff-2525a395c28a", "record_id": "flaws_cloudtrail:0000577:8c54a149-9ebc-423a-a0ff-2525a395c28a", "row_index": 577, "timestamp": "2019-07-23T08:15:04Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c54a149-9ebc-423a-a0ff-2525a395c28a", "eventTime": "2019-07-23T08:15:04Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAB4WAUPI3J8S2PCBT", "expiration": "Jul 23, 2019 8:15:04 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee4ff1c1-4d50-448b-9515-da9585b7d640", "record_id": "flaws_cloudtrail:0000578:ee4ff1c1-4d50-448b-9515-da9585b7d640", "row_index": 578, "timestamp": "2019-07-23T08:15:04Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee4ff1c1-4d50-448b-9515-da9585b7d640", "eventTime": "2019-07-23T08:15:04Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIASIGUPMYEMS5SER4K", "expiration": "Jul 23, 2019 8:15:04 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e031596-3bdc-4b03-a25f-1c3bcbd00149", "record_id": "flaws_cloudtrail:0000579:6e031596-3bdc-4b03-a25f-1c3bcbd00149", "row_index": 579, "timestamp": "2019-07-23T08:15:04Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIASIGUPMYEMS5SER4K", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "115.250.206.254", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e031596-3bdc-4b03-a25f-1c3bcbd00149", "eventTime": "2019-07-23T08:15:04Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "115.250.206.254", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIASIGUPMYEMS5SER4K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-23T08:15:04Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/23/[$LATEST]e74683135867f6259decd1ed8bc12c0c"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c54a149-9ebc-423a-a0ff-2525a395c28a", "record_id": "flaws_cloudtrail:0000580:8c54a149-9ebc-423a-a0ff-2525a395c28a", "row_index": 580, "timestamp": "2019-07-23T08:15:04Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c54a149-9ebc-423a-a0ff-2525a395c28a", "eventTime": "2019-07-23T08:15:04Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAB4WAUPI3J8S2PCBT", "expiration": "Jul 23, 2019 8:15:04 PM", "sessionToken": "AgoJb3JpZ2luX2VjEGgaCXVzLXdlc3QtMiJHMEUCIQD1iNmvRaAQTq6IMHViGeY772YEbNkZWziIyZA9ff5IaQIgekW1Nq/4d0gWdtcSNJ96JzrLYQvs616hllCc0hvchOwqiwII0f//////////ARAAGgw5NzU0MjYyNjIwMjkiDHEVTZnCqBE+PfRSzSrfAYdBgZh0VildXq50bzAArkaij2FH2L7yn0h1Trw+HOxkDGAPSmoWCARokdvEBczCt1p9DB3HndqemFuUx0h1N5NdpGLrGjORQVReFEKs5XHXqtlMXKSS5eBbexHBNYZPl33WjqdOVfheA605/L3/Yw8G3KNMkArBs/hiiYmZ7jsPcTP5qC98BvsUMo/WAE2TEgrIbp2j53n4OWKKPUYkUBjHftFIxO2v87oYkWhZ8p3WG9+sjo+x5l3UwTPPIc0tYiw7soXW6IrV3b094igxVV6n2nuPeQJ2NAO1BHcyDaUwiITb6QU6tAEwx9pNBsoy4Vtefyn+TVP2EzPC+MYsJC0S49kesQ3YMyduDV5MMcl/zlzIXB/qrVRxBRy9yDttK3SsMk9sOREd/VcJjPaZ/4sBo1PniHZuiX+oNBiSjOzNylLwqdZ1WusrBFTqIhqnuV/wJ0w4GXmYPBGwPzyYv2ATXjsVFnj4/Jy/8Avpo8iU9APGdu6r4QTEwv23/ktQFJis1j48YB+CSAH/aUL/3GvBwdfx7NFU3S5jGq4="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "888a3e86-d77c-43dc-9e86-412497d922c0", "record_id": "flaws_cloudtrail:0000581:888a3e86-d77c-43dc-9e86-412497d922c0", "row_index": 581, "timestamp": "2019-07-23T08:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "888a3e86-d77c-43dc-9e86-412497d922c0", "eventTime": "2019-07-23T08:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWCI2V8K3DQDOP4HN", "expiration": "Jul 23, 2019 2:32:14 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "888a3e86-d77c-43dc-9e86-412497d922c0", "record_id": "flaws_cloudtrail:0000582:888a3e86-d77c-43dc-9e86-412497d922c0", "row_index": 582, "timestamp": "2019-07-23T08:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "888a3e86-d77c-43dc-9e86-412497d922c0", "eventTime": "2019-07-23T08:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWCI2V8K3DQDOP4HN", "expiration": "Jul 23, 2019 2:32:14 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e8dd666-7b50-4665-8331-4d08172af423", "record_id": "flaws_cloudtrail:0000583:6e8dd666-7b50-4665-8331-4d08172af423", "row_index": 583, "timestamp": "2019-07-23T09:20:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.251.207.7", "user_agent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e8dd666-7b50-4665-8331-4d08172af423", "eventTime": "2019-07-23T09:20:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.251.207.7", "userAgent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e8dd666-7b50-4665-8331-4d08172af423", "record_id": "flaws_cloudtrail:0000584:6e8dd666-7b50-4665-8331-4d08172af423", "row_index": 584, "timestamp": "2019-07-23T09:20:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.251.207.7", "user_agent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e8dd666-7b50-4665-8331-4d08172af423", "eventTime": "2019-07-23T09:20:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.251.207.7", "userAgent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "108b85f2-daf1-49fe-a6f2-31251bd01c77", "record_id": "flaws_cloudtrail:0000585:108b85f2-daf1-49fe-a6f2-31251bd01c77", "row_index": 585, "timestamp": "2019-07-23T09:30:22Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.0.251.231", "user_agent": "[aws-cli/1.16.109 Python/3.5.2 Linux/4.4.0-151-generic botocore/1.12.99]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "108b85f2-daf1-49fe-a6f2-31251bd01c77", "eventTime": "2019-07-23T09:30:22Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.0.251.231", "userAgent": "[aws-cli/1.16.109 Python/3.5.2 Linux/4.4.0-151-generic botocore/1.12.99]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "108b85f2-daf1-49fe-a6f2-31251bd01c77", "record_id": "flaws_cloudtrail:0000586:108b85f2-daf1-49fe-a6f2-31251bd01c77", "row_index": 586, "timestamp": "2019-07-23T09:30:22Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.0.251.231", "user_agent": "[aws-cli/1.16.109 Python/3.5.2 Linux/4.4.0-151-generic botocore/1.12.99]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "108b85f2-daf1-49fe-a6f2-31251bd01c77", "eventTime": "2019-07-23T09:30:22Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.0.251.231", "userAgent": "[aws-cli/1.16.109 Python/3.5.2 Linux/4.4.0-151-generic botocore/1.12.99]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbbd29c8-a503-46eb-8689-0bbea31cd72e", "record_id": "flaws_cloudtrail:0000587:dbbd29c8-a503-46eb-8689-0bbea31cd72e", "row_index": 587, "timestamp": "2019-07-23T09:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbbd29c8-a503-46eb-8689-0bbea31cd72e", "eventTime": "2019-07-23T09:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIADUI3Q0G2CYQQN1UI", "expiration": "Jul 23, 2019 3:58:56 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbbd29c8-a503-46eb-8689-0bbea31cd72e", "record_id": "flaws_cloudtrail:0000588:dbbd29c8-a503-46eb-8689-0bbea31cd72e", "row_index": 588, "timestamp": "2019-07-23T09:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbbd29c8-a503-46eb-8689-0bbea31cd72e", "eventTime": "2019-07-23T09:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIADUI3Q0G2CYQQN1UI", "expiration": "Jul 23, 2019 3:58:56 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b4d318a-dc57-4016-b0c7-0a2c25b14f01", "record_id": "flaws_cloudtrail:0000589:3b4d318a-dc57-4016-b0c7-0a2c25b14f01", "row_index": 589, "timestamp": "2019-07-23T09:53:17Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.183.5.157", "user_agent": "[aws-cli/1.16.203 Python/2.7.16 Windows/10 botocore/1.12.193]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b4d318a-dc57-4016-b0c7-0a2c25b14f01", "eventTime": "2019-07-23T09:53:17Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.183.5.157", "userAgent": "[aws-cli/1.16.203 Python/2.7.16 Windows/10 botocore/1.12.193]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b4d318a-dc57-4016-b0c7-0a2c25b14f01", "record_id": "flaws_cloudtrail:0000590:3b4d318a-dc57-4016-b0c7-0a2c25b14f01", "row_index": 590, "timestamp": "2019-07-23T09:53:17Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.183.5.157", "user_agent": "[aws-cli/1.16.203 Python/2.7.16 Windows/10 botocore/1.12.193]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b4d318a-dc57-4016-b0c7-0a2c25b14f01", "eventTime": "2019-07-23T09:53:17Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.183.5.157", "userAgent": "[aws-cli/1.16.203 Python/2.7.16 Windows/10 botocore/1.12.193]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e06b446e-137e-412b-81ad-a0bc954f67b8", "record_id": "flaws_cloudtrail:0000591:e06b446e-137e-412b-81ad-a0bc954f67b8", "row_index": 591, "timestamp": "2019-07-23T09:55:44Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.183.5.157", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e06b446e-137e-412b-81ad-a0bc954f67b8", "eventTime": "2019-07-23T09:55:44Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.183.5.157", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e06b446e-137e-412b-81ad-a0bc954f67b8", "record_id": "flaws_cloudtrail:0000592:e06b446e-137e-412b-81ad-a0bc954f67b8", "row_index": 592, "timestamp": "2019-07-23T09:55:44Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.183.5.157", "user_agent": "aws-cli/1.16.203 Python/2.7.16 Windows/10 botocore/1.12.193", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e06b446e-137e-412b-81ad-a0bc954f67b8", "eventTime": "2019-07-23T09:55:44Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.183.5.157", "userAgent": "aws-cli/1.16.203 Python/2.7.16 Windows/10 botocore/1.12.193", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84a32b1a-4819-495b-bdae-c36760bf2174", "record_id": "flaws_cloudtrail:0000593:84a32b1a-4819-495b-bdae-c36760bf2174", "row_index": 593, "timestamp": "2019-07-23T09:57:57Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84a32b1a-4819-495b-bdae-c36760bf2174", "eventTime": "2019-07-23T09:57:57Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84a32b1a-4819-495b-bdae-c36760bf2174", "record_id": "flaws_cloudtrail:0000594:84a32b1a-4819-495b-bdae-c36760bf2174", "row_index": 594, "timestamp": "2019-07-23T09:57:57Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84a32b1a-4819-495b-bdae-c36760bf2174", "eventTime": "2019-07-23T09:57:57Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fa6396b-4e3c-46b1-b69d-c37e5d19c619", "record_id": "flaws_cloudtrail:0000595:5fa6396b-4e3c-46b1-b69d-c37e5d19c619", "row_index": 595, "timestamp": "2019-07-23T10:09:52Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fa6396b-4e3c-46b1-b69d-c37e5d19c619", "eventTime": "2019-07-23T10:09:52Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fa6396b-4e3c-46b1-b69d-c37e5d19c619", "record_id": "flaws_cloudtrail:0000596:5fa6396b-4e3c-46b1-b69d-c37e5d19c619", "row_index": 596, "timestamp": "2019-07-23T10:09:52Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fa6396b-4e3c-46b1-b69d-c37e5d19c619", "eventTime": "2019-07-23T10:09:52Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d7495f0-fc05-435c-ba6d-aaca2c0bbc99", "record_id": "flaws_cloudtrail:0000597:1d7495f0-fc05-435c-ba6d-aaca2c0bbc99", "row_index": 597, "timestamp": "2019-07-23T10:15:07Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d7495f0-fc05-435c-ba6d-aaca2c0bbc99", "eventTime": "2019-07-23T10:15:07Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d7495f0-fc05-435c-ba6d-aaca2c0bbc99", "record_id": "flaws_cloudtrail:0000598:1d7495f0-fc05-435c-ba6d-aaca2c0bbc99", "row_index": 598, "timestamp": "2019-07-23T10:15:07Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d7495f0-fc05-435c-ba6d-aaca2c0bbc99", "eventTime": "2019-07-23T10:15:07Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27be91cd-e3be-4d41-aa16-95b2e4c50c4d", "record_id": "flaws_cloudtrail:0000599:27be91cd-e3be-4d41-aa16-95b2e4c50c4d", "row_index": 599, "timestamp": "2019-07-23T10:26:56Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27be91cd-e3be-4d41-aa16-95b2e4c50c4d", "eventTime": "2019-07-23T10:26:56Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27be91cd-e3be-4d41-aa16-95b2e4c50c4d", "record_id": "flaws_cloudtrail:0000600:27be91cd-e3be-4d41-aa16-95b2e4c50c4d", "row_index": 600, "timestamp": "2019-07-23T10:26:56Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.3.3.245", "user_agent": "aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27be91cd-e3be-4d41-aa16-95b2e4c50c4d", "eventTime": "2019-07-23T10:26:56Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.3.3.245", "userAgent": "aws-cli/1.16.96 Python/2.7.15+ Linux/4.15.0-54-generic botocore/1.12.86", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8869aee-8929-49a5-a6e8-2a415a83081c", "record_id": "flaws_cloudtrail:0000601:d8869aee-8929-49a5-a6e8-2a415a83081c", "row_index": 601, "timestamp": "2019-07-23T10:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8869aee-8929-49a5-a6e8-2a415a83081c", "eventTime": "2019-07-23T10:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIG1OOJO9OQ5G1BNF", "expiration": "Jul 23, 2019 4:47:44 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8869aee-8929-49a5-a6e8-2a415a83081c", "record_id": "flaws_cloudtrail:0000602:d8869aee-8929-49a5-a6e8-2a415a83081c", "row_index": 602, "timestamp": "2019-07-23T10:31:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8869aee-8929-49a5-a6e8-2a415a83081c", "eventTime": "2019-07-23T10:31:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIG1OOJO9OQ5G1BNF", "expiration": "Jul 23, 2019 4:47:44 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98bef809-0c70-45d6-9513-e169d0a2de26", "record_id": "flaws_cloudtrail:0000603:98bef809-0c70-45d6-9513-e169d0a2de26", "row_index": 603, "timestamp": "2019-07-23T10:45:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.251.207.7", "user_agent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98bef809-0c70-45d6-9513-e169d0a2de26", "eventTime": "2019-07-23T10:45:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.251.207.7", "userAgent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98bef809-0c70-45d6-9513-e169d0a2de26", "record_id": "flaws_cloudtrail:0000604:98bef809-0c70-45d6-9513-e169d0a2de26", "row_index": 604, "timestamp": "2019-07-23T10:45:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.251.207.7", "user_agent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98bef809-0c70-45d6-9513-e169d0a2de26", "eventTime": "2019-07-23T10:45:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.251.207.7", "userAgent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ce8c457-6fe0-455c-95a5-94fcc470fdb8", "record_id": "flaws_cloudtrail:0000605:4ce8c457-6fe0-455c-95a5-94fcc470fdb8", "row_index": 605, "timestamp": "2019-07-23T10:46:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.251.207.7", "user_agent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ce8c457-6fe0-455c-95a5-94fcc470fdb8", "eventTime": "2019-07-23T10:46:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.251.207.7", "userAgent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ce8c457-6fe0-455c-95a5-94fcc470fdb8", "record_id": "flaws_cloudtrail:0000606:4ce8c457-6fe0-455c-95a5-94fcc470fdb8", "row_index": 606, "timestamp": "2019-07-23T10:46:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.251.207.7", "user_agent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ce8c457-6fe0-455c-95a5-94fcc470fdb8", "eventTime": "2019-07-23T10:46:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.251.207.7", "userAgent": "aws-cli/1.16.202 Python/2.7.5 Linux/3.10.0-957.12.2.el7.x86_64 botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7af51155-4d8a-495e-8309-ca915112", "record_id": "flaws_cloudtrail:0000607:7af51155-4d8a-495e-8309-ca915112", "row_index": 607, "timestamp": "2019-07-23T11:01:39Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA04B4TWPEY5T7BVWY", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "27.247.248.160", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7af51155-4d8a-495e-8309-ca915112", "eventTime": "2019-07-23T11:01:39Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.247.248.160", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA04B4TWPEY5T7BVWY", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-23T11:01:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/23/[$LATEST]79895b47bc348d18fde529d79cbf1504", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "853d92df-c857-4bee-bf20-a9b30f4e207e", "record_id": "flaws_cloudtrail:0000608:853d92df-c857-4bee-bf20-a9b30f4e207e", "row_index": 608, "timestamp": "2019-07-23T11:01:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "853d92df-c857-4bee-bf20-a9b30f4e207e", "eventTime": "2019-07-23T11:01:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA04B4TWPEY5T7BVWY", "expiration": "Jul 23, 2019 11:01:39 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e3e8304-4b3c-46f8-a77c-91834049b83d", "record_id": "flaws_cloudtrail:0000609:8e3e8304-4b3c-46f8-a77c-91834049b83d", "row_index": 609, "timestamp": "2019-07-23T11:01:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1620, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e3e8304-4b3c-46f8-a77c-91834049b83d", "eventTime": "2019-07-23T11:01:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPTU0WCIYOYPQURNQ", "expiration": "Jul 23, 2019 11:01:39 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7af51155-4d8a-495e-8309-ca915112", "record_id": "flaws_cloudtrail:0000610:7af51155-4d8a-495e-8309-ca915112", "row_index": 610, "timestamp": "2019-07-23T11:01:39Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA04B4TWPEY5T7BVWY", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "27.247.248.160", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7af51155-4d8a-495e-8309-ca915112", "eventTime": "2019-07-23T11:01:39Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.247.248.160", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA04B4TWPEY5T7BVWY", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-23T11:01:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/07/23/[$LATEST]79895b47bc348d18fde529d79cbf1504", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "853d92df-c857-4bee-bf20-a9b30f4e207e", "record_id": "flaws_cloudtrail:0000611:853d92df-c857-4bee-bf20-a9b30f4e207e", "row_index": 611, "timestamp": "2019-07-23T11:01:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "853d92df-c857-4bee-bf20-a9b30f4e207e", "eventTime": "2019-07-23T11:01:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA04B4TWPEY5T7BVWY", "expiration": "Jul 23, 2019 11:01:39 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}