Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM actor appears to validate their access, survey IAM identities and credentials, and then establish a new credentialed identity with permissions. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets they touched or created. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f4d5cc1-b2fd-492f-9a6c-f6fba4d0a7e4", "record_id": "flaws_cloudtrail:0000000:5f4d5cc1-b2fd-492f-9a6c-f6fba4d0a7e4", "row_index": 0, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f4d5cc1-b2fd-492f-9a6c-f6fba4d0a7e4", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41fbe427-02de-4472-ac1e-cd6d62beb0b8", "record_id": "flaws_cloudtrail:0000001:41fbe427-02de-4472-ac1e-cd6d62beb0b8", "row_index": 1, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41fbe427-02de-4472-ac1e-cd6d62beb0b8", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac31cc40-fcd5-4e4e-af8b-f3f314b71c5a", "record_id": "flaws_cloudtrail:0000002:ac31cc40-fcd5-4e4e-af8b-f3f314b71c5a", "row_index": 2, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac31cc40-fcd5-4e4e-af8b-f3f314b71c5a", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b536072-af6e-4bda-a034-224b21c1e529", "record_id": "flaws_cloudtrail:0000003:5b536072-af6e-4bda-a034-224b21c1e529", "row_index": 3, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b536072-af6e-4bda-a034-224b21c1e529", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1d9fe0a-97de-4ae9-9778-b33184fd42be", "record_id": "flaws_cloudtrail:0000004:e1d9fe0a-97de-4ae9-9778-b33184fd42be", "row_index": 4, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1d9fe0a-97de-4ae9-9778-b33184fd42be", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aab88e6c-65dd-4286-a8d2-5d6b7fa28e8e", "record_id": "flaws_cloudtrail:0000005:aab88e6c-65dd-4286-a8d2-5d6b7fa28e8e", "row_index": 5, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aab88e6c-65dd-4286-a8d2-5d6b7fa28e8e", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbee5b3c-0f8f-4cbb-a8fc-ec3900411e7c", "record_id": "flaws_cloudtrail:0000006:cbee5b3c-0f8f-4cbb-a8fc-ec3900411e7c", "row_index": 6, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbee5b3c-0f8f-4cbb-a8fc-ec3900411e7c", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "330741f2-46a8-41cc-b044-825c94e1ceec", "record_id": "flaws_cloudtrail:0000007:330741f2-46a8-41cc-b044-825c94e1ceec", "row_index": 7, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "330741f2-46a8-41cc-b044-825c94e1ceec", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69c095a0-3a2a-45f4-985b-534353c0b914", "record_id": "flaws_cloudtrail:0000008:69c095a0-3a2a-45f4-985b-534353c0b914", "row_index": 8, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69c095a0-3a2a-45f4-985b-534353c0b914", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd8cd011-4abb-4130-a94b-05f40a133bdc", "record_id": "flaws_cloudtrail:0000009:bd8cd011-4abb-4130-a94b-05f40a133bdc", "row_index": 9, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd8cd011-4abb-4130-a94b-05f40a133bdc", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c6b0edc-ec5e-463b-b737-aa15cfb33ea1", "record_id": "flaws_cloudtrail:0000010:3c6b0edc-ec5e-463b-b737-aa15cfb33ea1", "row_index": 10, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c6b0edc-ec5e-463b-b737-aa15cfb33ea1", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71b661382-2cc1-4f27-90e7-894ffa67ccb6", "record_id": "flaws_cloudtrail:0000011:71b661382-2cc1-4f27-90e7-894ffa67ccb6", "row_index": 11, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71b661382-2cc1-4f27-90e7-894ffa67ccb6", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f76bebf9-fc14-4a47-909a-db23ad6e27d8", "record_id": "flaws_cloudtrail:0000012:f76bebf9-fc14-4a47-909a-db23ad6e27d8", "row_index": 12, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f76bebf9-fc14-4a47-909a-db23ad6e27d8", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72e49e6a-0add-42e4-9704-e1dd8f57b2cf", "record_id": "flaws_cloudtrail:0000013:72e49e6a-0add-42e4-9704-e1dd8f57b2cf", "row_index": 13, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72e49e6a-0add-42e4-9704-e1dd8f57b2cf", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c810a01f-7acd-4713-961c-f9365ed8b36c", "record_id": "flaws_cloudtrail:0000014:c810a01f-7acd-4713-961c-f9365ed8b36c", "row_index": 14, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c810a01f-7acd-4713-961c-f9365ed8b36c", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8da6ae5b-438a-41fa-99c5-90ee4f9ef941", "record_id": "flaws_cloudtrail:0000015:8da6ae5b-438a-41fa-99c5-90ee4f9ef941", "row_index": 15, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8da6ae5b-438a-41fa-99c5-90ee4f9ef941", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9de4d01f-ebeb-441c-8fb3-7ac22998ee", "record_id": "flaws_cloudtrail:0000016:9de4d01f-ebeb-441c-8fb3-7ac22998ee", "row_index": 16, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9de4d01f-ebeb-441c-8fb3-7ac22998ee", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4f88a7c-4b62-470c-adbc-f1e713356282", "record_id": "flaws_cloudtrail:0000017:c4f88a7c-4b62-470c-adbc-f1e713356282", "row_index": 17, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4f88a7c-4b62-470c-adbc-f1e713356282", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cdd5c74-55b6-482b-a837-ee767731f6a8a", "record_id": "flaws_cloudtrail:0000018:7cdd5c74-55b6-482b-a837-ee767731f6a8a", "row_index": 18, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cdd5c74-55b6-482b-a837-ee767731f6a8a", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10c60e05-1798-4b43-bd72-8a9a26bee7fc", "record_id": "flaws_cloudtrail:0000019:10c60e05-1798-4b43-bd72-8a9a26bee7fc", "row_index": 19, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10c60e05-1798-4b43-bd72-8a9a26bee7fc", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75e80348-5898-41b7-9806-f16397b1e09", "record_id": "flaws_cloudtrail:0000020:75e80348-5898-41b7-9806-f16397b1e09", "row_index": 20, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75e80348-5898-41b7-9806-f16397b1e09", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a894b742-5d56-42f9-9b8f-f37b91b5f26f", "record_id": "flaws_cloudtrail:0000021:a894b742-5d56-42f9-9b8f-f37b91b5f26f", "row_index": 21, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a894b742-5d56-42f9-9b8f-f37b91b5f26f", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa01df4f-22bc-4570-afb9-7976c76cca3d", "record_id": "flaws_cloudtrail:0000022:aa01df4f-22bc-4570-afb9-7976c76cca3d", "row_index": 22, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa01df4f-22bc-4570-afb9-7976c76cca3d", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf61f7ab-389b-4f3a-bcba-d8183a60f155", "record_id": "flaws_cloudtrail:0000023:cf61f7ab-389b-4f3a-bcba-d8183a60f155", "row_index": 23, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf61f7ab-389b-4f3a-bcba-d8183a60f155", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac890a40-5287-4001-9892-c85b8ff42a81", "record_id": "flaws_cloudtrail:0000024:ac890a40-5287-4001-9892-c85b8ff42a81", "row_index": 24, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac890a40-5287-4001-9892-c85b8ff42a81", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71ce5dda-084c-490e-9cee-675788012735", "record_id": "flaws_cloudtrail:0000025:71ce5dda-084c-490e-9cee-675788012735", "row_index": 25, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71ce5dda-084c-490e-9cee-675788012735", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "327c47ac-8359-4b7c-91b2-4541ddecc0c2", "record_id": "flaws_cloudtrail:0000026:327c47ac-8359-4b7c-91b2-4541ddecc0c2", "row_index": 26, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "327c47ac-8359-4b7c-91b2-4541ddecc0c2", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f403d9c-5909-49bd-a104-f0af29a5e127", "record_id": "flaws_cloudtrail:0000027:4f403d9c-5909-49bd-a104-f0af29a5e127", "row_index": 27, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f403d9c-5909-49bd-a104-f0af29a5e127", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "369179cad-cd83-4747-93d1-ac17d79fa2b7", "record_id": "flaws_cloudtrail:0000028:369179cad-cd83-4747-93d1-ac17d79fa2b7", "row_index": 28, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "369179cad-cd83-4747-93d1-ac17d79fa2b7", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db781583-1de1-4719-a89d-94aa207f7dac", "record_id": "flaws_cloudtrail:0000029:db781583-1de1-4719-a89d-94aa207f7dac", "row_index": 29, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db781583-1de1-4719-a89d-94aa207f7dac", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87f5532f-6a22-4448-ad71-6f7e3cebe960", "record_id": "flaws_cloudtrail:0000030:87f5532f-6a22-4448-ad71-6f7e3cebe960", "row_index": 30, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87f5532f-6a22-4448-ad71-6f7e3cebe960", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "689e6d68-bcd2-4b63-b32b-0dfbcdad3f37", "record_id": "flaws_cloudtrail:0000031:689e6d68-bcd2-4b63-b32b-0dfbcdad3f37", "row_index": 31, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "689e6d68-bcd2-4b63-b32b-0dfbcdad3f37", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e27496fb-04df-457a-b482-f1da32e314f4", "record_id": "flaws_cloudtrail:0000032:e27496fb-04df-457a-b482-f1da32e314f4", "row_index": 32, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e27496fb-04df-457a-b482-f1da32e314f4", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06e3dc0a-ecd9-410d-a9c9-e50641d", "record_id": "flaws_cloudtrail:0000033:06e3dc0a-ecd9-410d-a9c9-e50641d", "row_index": 33, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06e3dc0a-ecd9-410d-a9c9-e50641d", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e31f9b4f-fd23-4e12-ad58-a13751fbe3dd", "record_id": "flaws_cloudtrail:0000034:e31f9b4f-fd23-4e12-ad58-a13751fbe3dd", "row_index": 34, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e31f9b4f-fd23-4e12-ad58-a13751fbe3dd", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d833925-d17f-470d-8662-ce57679", "record_id": "flaws_cloudtrail:0000035:6d833925-d17f-470d-8662-ce57679", "row_index": 35, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d833925-d17f-470d-8662-ce57679", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9f3c66a-582d-4ce5-af4f-dc9e2b482b95", "record_id": "flaws_cloudtrail:0000036:e9f3c66a-582d-4ce5-af4f-dc9e2b482b95", "row_index": 36, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9f3c66a-582d-4ce5-af4f-dc9e2b482b95", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2da84e6c-c156-4d7b-b5b4-2083b512d5a3", "record_id": "flaws_cloudtrail:0000037:2da84e6c-c156-4d7b-b5b4-2083b512d5a3", "row_index": 37, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2da84e6c-c156-4d7b-b5b4-2083b512d5a3", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ae28746-0e28-41f7-b949-2e6da9c76aca", "record_id": "flaws_cloudtrail:0000038:9ae28746-0e28-41f7-b949-2e6da9c76aca", "row_index": 38, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ae28746-0e28-41f7-b949-2e6da9c76aca", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1493ea1-dda3-4252-b30f-f8f348a8f489", "record_id": "flaws_cloudtrail:0000039:f1493ea1-dda3-4252-b30f-f8f348a8f489", "row_index": 39, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1493ea1-dda3-4252-b30f-f8f348a8f489", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7efbfaab-b91c-42f7-8c06-9df535f6812c", "record_id": "flaws_cloudtrail:0000040:7efbfaab-b91c-42f7-8c06-9df535f6812c", "row_index": 40, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7efbfaab-b91c-42f7-8c06-9df535f6812c", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "031830-c397-43c4-bc03-0605c9c82f68", "record_id": "flaws_cloudtrail:0000041:031830-c397-43c4-bc03-0605c9c82f68", "row_index": 41, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "031830-c397-43c4-bc03-0605c9c82f68", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7316aeb7-5371-4608-a72a-b6794b98d732", "record_id": "flaws_cloudtrail:0000042:7316aeb7-5371-4608-a72a-b6794b98d732", "row_index": 42, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7316aeb7-5371-4608-a72a-b6794b98d732", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f4cb0f9-5fb9-420b-959c-57e62c09717f", "record_id": "flaws_cloudtrail:0000043:4f4cb0f9-5fb9-420b-959c-57e62c09717f", "row_index": 43, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f4cb0f9-5fb9-420b-959c-57e62c09717f", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90fd0452-21af-49bd-8e2f-beff47fd737c", "record_id": "flaws_cloudtrail:0000044:90fd0452-21af-49bd-8e2f-beff47fd737c", "row_index": 44, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90fd0452-21af-49bd-8e2f-beff47fd737c", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-southeast-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e51be38-6b10-42ce-ac78-c9c162e2107c", "record_id": "flaws_cloudtrail:0000045:0e51be38-6b10-42ce-ac78-c9c162e2107c", "row_index": 45, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e51be38-6b10-42ce-ac78-c9c162e2107c", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f4d5cc1-b2fd-492f-9a6c-f6fba4d0a7e4", "record_id": "flaws_cloudtrail:0000046:5f4d5cc1-b2fd-492f-9a6c-f6fba4d0a7e4", "row_index": 46, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f4d5cc1-b2fd-492f-9a6c-f6fba4d0a7e4", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41fbe427-02de-4472-ac1e-cd6d62beb0b8", "record_id": "flaws_cloudtrail:0000047:41fbe427-02de-4472-ac1e-cd6d62beb0b8", "row_index": 47, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41fbe427-02de-4472-ac1e-cd6d62beb0b8", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac31cc40-fcd5-4e4e-af8b-f3f314b71c5a", "record_id": "flaws_cloudtrail:0000048:ac31cc40-fcd5-4e4e-af8b-f3f314b71c5a", "row_index": 48, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac31cc40-fcd5-4e4e-af8b-f3f314b71c5a", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b536072-af6e-4bda-a034-224b21c1e529", "record_id": "flaws_cloudtrail:0000049:5b536072-af6e-4bda-a034-224b21c1e529", "row_index": 49, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b536072-af6e-4bda-a034-224b21c1e529", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1d9fe0a-97de-4ae9-9778-b33184fd42be", "record_id": "flaws_cloudtrail:0000050:e1d9fe0a-97de-4ae9-9778-b33184fd42be", "row_index": 50, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1d9fe0a-97de-4ae9-9778-b33184fd42be", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aab88e6c-65dd-4286-a8d2-5d6b7fa28e8e", "record_id": "flaws_cloudtrail:0000051:aab88e6c-65dd-4286-a8d2-5d6b7fa28e8e", "row_index": 51, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aab88e6c-65dd-4286-a8d2-5d6b7fa28e8e", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbee5b3c-0f8f-4cbb-a8fc-ec3900411e7c", "record_id": "flaws_cloudtrail:0000052:cbee5b3c-0f8f-4cbb-a8fc-ec3900411e7c", "row_index": 52, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbee5b3c-0f8f-4cbb-a8fc-ec3900411e7c", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "330741f2-46a8-41cc-b044-825c94e1ceec", "record_id": "flaws_cloudtrail:0000053:330741f2-46a8-41cc-b044-825c94e1ceec", "row_index": 53, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "330741f2-46a8-41cc-b044-825c94e1ceec", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69c095a0-3a2a-45f4-985b-534353c0b914", "record_id": "flaws_cloudtrail:0000054:69c095a0-3a2a-45f4-985b-534353c0b914", "row_index": 54, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69c095a0-3a2a-45f4-985b-534353c0b914", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd8cd011-4abb-4130-a94b-05f40a133bdc", "record_id": "flaws_cloudtrail:0000055:bd8cd011-4abb-4130-a94b-05f40a133bdc", "row_index": 55, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd8cd011-4abb-4130-a94b-05f40a133bdc", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c6b0edc-ec5e-463b-b737-aa15cfb33ea1", "record_id": "flaws_cloudtrail:0000056:3c6b0edc-ec5e-463b-b737-aa15cfb33ea1", "row_index": 56, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c6b0edc-ec5e-463b-b737-aa15cfb33ea1", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71b661382-2cc1-4f27-90e7-894ffa67ccb6", "record_id": "flaws_cloudtrail:0000057:71b661382-2cc1-4f27-90e7-894ffa67ccb6", "row_index": 57, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71b661382-2cc1-4f27-90e7-894ffa67ccb6", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f76bebf9-fc14-4a47-909a-db23ad6e27d8", "record_id": "flaws_cloudtrail:0000058:f76bebf9-fc14-4a47-909a-db23ad6e27d8", "row_index": 58, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f76bebf9-fc14-4a47-909a-db23ad6e27d8", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72e49e6a-0add-42e4-9704-e1dd8f57b2cf", "record_id": "flaws_cloudtrail:0000059:72e49e6a-0add-42e4-9704-e1dd8f57b2cf", "row_index": 59, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72e49e6a-0add-42e4-9704-e1dd8f57b2cf", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c810a01f-7acd-4713-961c-f9365ed8b36c", "record_id": "flaws_cloudtrail:0000060:c810a01f-7acd-4713-961c-f9365ed8b36c", "row_index": 60, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c810a01f-7acd-4713-961c-f9365ed8b36c", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8da6ae5b-438a-41fa-99c5-90ee4f9ef941", "record_id": "flaws_cloudtrail:0000061:8da6ae5b-438a-41fa-99c5-90ee4f9ef941", "row_index": 61, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8da6ae5b-438a-41fa-99c5-90ee4f9ef941", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9de4d01f-ebeb-441c-8fb3-7ac22998ee", "record_id": "flaws_cloudtrail:0000062:9de4d01f-ebeb-441c-8fb3-7ac22998ee", "row_index": 62, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9de4d01f-ebeb-441c-8fb3-7ac22998ee", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4f88a7c-4b62-470c-adbc-f1e713356282", "record_id": "flaws_cloudtrail:0000063:c4f88a7c-4b62-470c-adbc-f1e713356282", "row_index": 63, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4f88a7c-4b62-470c-adbc-f1e713356282", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cdd5c74-55b6-482b-a837-ee767731f6a8a", "record_id": "flaws_cloudtrail:0000064:7cdd5c74-55b6-482b-a837-ee767731f6a8a", "row_index": 64, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cdd5c74-55b6-482b-a837-ee767731f6a8a", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10c60e05-1798-4b43-bd72-8a9a26bee7fc", "record_id": "flaws_cloudtrail:0000065:10c60e05-1798-4b43-bd72-8a9a26bee7fc", "row_index": 65, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10c60e05-1798-4b43-bd72-8a9a26bee7fc", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75e80348-5898-41b7-9806-f16397b1e09", "record_id": "flaws_cloudtrail:0000066:75e80348-5898-41b7-9806-f16397b1e09", "row_index": 66, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75e80348-5898-41b7-9806-f16397b1e09", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a894b742-5d56-42f9-9b8f-f37b91b5f26f", "record_id": "flaws_cloudtrail:0000067:a894b742-5d56-42f9-9b8f-f37b91b5f26f", "row_index": 67, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a894b742-5d56-42f9-9b8f-f37b91b5f26f", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa01df4f-22bc-4570-afb9-7976c76cca3d", "record_id": "flaws_cloudtrail:0000068:aa01df4f-22bc-4570-afb9-7976c76cca3d", "row_index": 68, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa01df4f-22bc-4570-afb9-7976c76cca3d", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf61f7ab-389b-4f3a-bcba-d8183a60f155", "record_id": "flaws_cloudtrail:0000069:cf61f7ab-389b-4f3a-bcba-d8183a60f155", "row_index": 69, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf61f7ab-389b-4f3a-bcba-d8183a60f155", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac890a40-5287-4001-9892-c85b8ff42a81", "record_id": "flaws_cloudtrail:0000070:ac890a40-5287-4001-9892-c85b8ff42a81", "row_index": 70, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac890a40-5287-4001-9892-c85b8ff42a81", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71ce5dda-084c-490e-9cee-675788012735", "record_id": "flaws_cloudtrail:0000071:71ce5dda-084c-490e-9cee-675788012735", "row_index": 71, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71ce5dda-084c-490e-9cee-675788012735", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "327c47ac-8359-4b7c-91b2-4541ddecc0c2", "record_id": "flaws_cloudtrail:0000072:327c47ac-8359-4b7c-91b2-4541ddecc0c2", "row_index": 72, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "327c47ac-8359-4b7c-91b2-4541ddecc0c2", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f403d9c-5909-49bd-a104-f0af29a5e127", "record_id": "flaws_cloudtrail:0000073:4f403d9c-5909-49bd-a104-f0af29a5e127", "row_index": 73, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f403d9c-5909-49bd-a104-f0af29a5e127", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "369179cad-cd83-4747-93d1-ac17d79fa2b7", "record_id": "flaws_cloudtrail:0000074:369179cad-cd83-4747-93d1-ac17d79fa2b7", "row_index": 74, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "369179cad-cd83-4747-93d1-ac17d79fa2b7", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db781583-1de1-4719-a89d-94aa207f7dac", "record_id": "flaws_cloudtrail:0000075:db781583-1de1-4719-a89d-94aa207f7dac", "row_index": 75, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db781583-1de1-4719-a89d-94aa207f7dac", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87f5532f-6a22-4448-ad71-6f7e3cebe960", "record_id": "flaws_cloudtrail:0000076:87f5532f-6a22-4448-ad71-6f7e3cebe960", "row_index": 76, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87f5532f-6a22-4448-ad71-6f7e3cebe960", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "689e6d68-bcd2-4b63-b32b-0dfbcdad3f37", "record_id": "flaws_cloudtrail:0000077:689e6d68-bcd2-4b63-b32b-0dfbcdad3f37", "row_index": 77, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "689e6d68-bcd2-4b63-b32b-0dfbcdad3f37", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e27496fb-04df-457a-b482-f1da32e314f4", "record_id": "flaws_cloudtrail:0000078:e27496fb-04df-457a-b482-f1da32e314f4", "row_index": 78, "timestamp": "2019-07-08T15:22:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e27496fb-04df-457a-b482-f1da32e314f4", "eventTime": "2019-07-08T15:22:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "951487e-d076-4c78-a04e-2f1428270a5d", "record_id": "flaws_cloudtrail:0000079:951487e-d076-4c78-a04e-2f1428270a5d", "row_index": 79, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "951487e-d076-4c78-a04e-2f1428270a5d", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05529-39ef-4212-bd1f-117c9fe3221b", "record_id": "flaws_cloudtrail:0000080:05529-39ef-4212-bd1f-117c9fe3221b", "row_index": 80, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05529-39ef-4212-bd1f-117c9fe3221b", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b52e758-3eef-4642-98cb-bedc60423996", "record_id": "flaws_cloudtrail:0000081:6b52e758-3eef-4642-98cb-bedc60423996", "row_index": 81, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b52e758-3eef-4642-98cb-bedc60423996", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37404b-3a76-47c6-8a15-7a4ff4c120a5", "record_id": "flaws_cloudtrail:0000082:37404b-3a76-47c6-8a15-7a4ff4c120a5", "row_index": 82, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37404b-3a76-47c6-8a15-7a4ff4c120a5", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8aef06e4-6c6a-4941-8fe7-f35cc1c5cd55", "record_id": "flaws_cloudtrail:0000083:8aef06e4-6c6a-4941-8fe7-f35cc1c5cd55", "row_index": 83, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8aef06e4-6c6a-4941-8fe7-f35cc1c5cd55", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd4f5b45-4988-4718-b48c-c10be2ff60c5", "record_id": "flaws_cloudtrail:0000084:fd4f5b45-4988-4718-b48c-c10be2ff60c5", "row_index": 84, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd4f5b45-4988-4718-b48c-c10be2ff60c5", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51c85a72-d18b-4282-9e20-ea0428a005b2", "record_id": "flaws_cloudtrail:0000085:51c85a72-d18b-4282-9e20-ea0428a005b2", "row_index": 85, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51c85a72-d18b-4282-9e20-ea0428a005b2", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "126d304b-3e8e-4f27-a428-e78a04cce8c1", "record_id": "flaws_cloudtrail:0000086:126d304b-3e8e-4f27-a428-e78a04cce8c1", "row_index": 86, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "126d304b-3e8e-4f27-a428-e78a04cce8c1", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "330d404a-0666-44c6-9633-18d63711a1d", "record_id": "flaws_cloudtrail:0000087:330d404a-0666-44c6-9633-18d63711a1d", "row_index": 87, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "330d404a-0666-44c6-9633-18d63711a1d", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b667770-4545-45c9-994a-856946a87716", "record_id": "flaws_cloudtrail:0000088:1b667770-4545-45c9-994a-856946a87716", "row_index": 88, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b667770-4545-45c9-994a-856946a87716", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e928b4c9-ae80-4b75-a99c-356dca63aa4d", "record_id": "flaws_cloudtrail:0000089:e928b4c9-ae80-4b75-a99c-356dca63aa4d", "row_index": 89, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e928b4c9-ae80-4b75-a99c-356dca63aa4d", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dc59fa0-1781-4078-bc03-6ee700fae937", "record_id": "flaws_cloudtrail:0000090:1dc59fa0-1781-4078-bc03-6ee700fae937", "row_index": 90, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dc59fa0-1781-4078-bc03-6ee700fae937", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19125f1-944b-4e21-87c7-c1fd654aff85", "record_id": "flaws_cloudtrail:0000091:19125f1-944b-4e21-87c7-c1fd654aff85", "row_index": 91, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19125f1-944b-4e21-87c7-c1fd654aff85", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "622da426-9aad-48f3-8630-6acb9bcee819", "record_id": "flaws_cloudtrail:0000092:622da426-9aad-48f3-8630-6acb9bcee819", "row_index": 92, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "622da426-9aad-48f3-8630-6acb9bcee819", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08343b5-8683-4cc6-b81a-c4113463a6e6", "record_id": "flaws_cloudtrail:0000093:08343b5-8683-4cc6-b81a-c4113463a6e6", "row_index": 93, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08343b5-8683-4cc6-b81a-c4113463a6e6", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9fe7d38-93ef-4726-9ff2-cec873f237d2", "record_id": "flaws_cloudtrail:0000094:a9fe7d38-93ef-4726-9ff2-cec873f237d2", "row_index": 94, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9fe7d38-93ef-4726-9ff2-cec873f237d2", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42271-866b-455c-8e2d-f4d186e27d71", "record_id": "flaws_cloudtrail:0000095:42271-866b-455c-8e2d-f4d186e27d71", "row_index": 95, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42271-866b-455c-8e2d-f4d186e27d71", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85db694e-4674-4efe-ab3a-77bec14d3571", "record_id": "flaws_cloudtrail:0000096:85db694e-4674-4efe-ab3a-77bec14d3571", "row_index": 96, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85db694e-4674-4efe-ab3a-77bec14d3571", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ce1112b-131e-40c4-bbc1-148353a6d149c", "record_id": "flaws_cloudtrail:0000097:8ce1112b-131e-40c4-bbc1-148353a6d149c", "row_index": 97, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ce1112b-131e-40c4-bbc1-148353a6d149c", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d84dd46a-7b00-482a-a0d4-f1b8ddfa77e1", "record_id": "flaws_cloudtrail:0000098:d84dd46a-7b00-482a-a0d4-f1b8ddfa77e1", "row_index": 98, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d84dd46a-7b00-482a-a0d4-f1b8ddfa77e1", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "611be01b-380a-4daa-8e44-aaf60abd1f91", "record_id": "flaws_cloudtrail:0000099:611be01b-380a-4daa-8e44-aaf60abd1f91", "row_index": 99, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "611be01b-380a-4daa-8e44-aaf60abd1f91", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98850d-8d3c-4ced-97ef-4d389245fa2a", "record_id": "flaws_cloudtrail:0000100:98850d-8d3c-4ced-97ef-4d389245fa2a", "row_index": 100, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98850d-8d3c-4ced-97ef-4d389245fa2a", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "996db76e-0062-435f-9c19-40d64b819cb5", "record_id": "flaws_cloudtrail:0000101:996db76e-0062-435f-9c19-40d64b819cb5", "row_index": 101, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "996db76e-0062-435f-9c19-40d64b819cb5", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e3af3ce-d8f1-4ba6-81c8-11b225f1052b", "record_id": "flaws_cloudtrail:0000102:3e3af3ce-d8f1-4ba6-81c8-11b225f1052b", "row_index": 102, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e3af3ce-d8f1-4ba6-81c8-11b225f1052b", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91b549ca-5fc1-420e-848b-dde9f9c100c2", "record_id": "flaws_cloudtrail:0000103:91b549ca-5fc1-420e-848b-dde9f9c100c2", "row_index": 103, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91b549ca-5fc1-420e-848b-dde9f9c100c2", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b42ccf78-a4a5-49c9-ac37-551dd4c485a7", "record_id": "flaws_cloudtrail:0000104:b42ccf78-a4a5-49c9-ac37-551dd4c485a7", "row_index": 104, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b42ccf78-a4a5-49c9-ac37-551dd4c485a7", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d97ff1e7-ca1a-428e-8417-c90ef0b73f78", "record_id": "flaws_cloudtrail:0000105:d97ff1e7-ca1a-428e-8417-c90ef0b73f78", "row_index": 105, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d97ff1e7-ca1a-428e-8417-c90ef0b73f78", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8acf2137-fd51-4d80-b1e3-5adb143dc63c", "record_id": "flaws_cloudtrail:0000106:8acf2137-fd51-4d80-b1e3-5adb143dc63c", "row_index": 106, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeInstanceAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8acf2137-fd51-4d80-b1e3-5adb143dc63c", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeInstanceAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instanceId": "i-aa2d3b42e5c6e801a", "attribute": "userData"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aba2162-c538-4080-bf74-3604cdf1cff3", "record_id": "flaws_cloudtrail:0000107:9aba2162-c538-4080-bf74-3604cdf1cff3", "row_index": 107, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aba2162-c538-4080-bf74-3604cdf1cff3", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a73c885-1513-4239-ad64-c2b35063a7ec", "record_id": "flaws_cloudtrail:0000108:3a73c885-1513-4239-ad64-c2b35063a7ec", "row_index": 108, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a73c885-1513-4239-ad64-c2b35063a7ec", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c64a20d-c2da-4644-9b4b-018cf1765782", "record_id": "flaws_cloudtrail:0000109:5c64a20d-c2da-4644-9b4b-018cf1765782", "row_index": 109, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c64a20d-c2da-4644-9b4b-018cf1765782", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "951487e-d076-4c78-a04e-2f1428270a5d", "record_id": "flaws_cloudtrail:0000110:951487e-d076-4c78-a04e-2f1428270a5d", "row_index": 110, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "951487e-d076-4c78-a04e-2f1428270a5d", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05529-39ef-4212-bd1f-117c9fe3221b", "record_id": "flaws_cloudtrail:0000111:05529-39ef-4212-bd1f-117c9fe3221b", "row_index": 111, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05529-39ef-4212-bd1f-117c9fe3221b", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b52e758-3eef-4642-98cb-bedc60423996", "record_id": "flaws_cloudtrail:0000112:6b52e758-3eef-4642-98cb-bedc60423996", "row_index": 112, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b52e758-3eef-4642-98cb-bedc60423996", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37404b-3a76-47c6-8a15-7a4ff4c120a5", "record_id": "flaws_cloudtrail:0000113:37404b-3a76-47c6-8a15-7a4ff4c120a5", "row_index": 113, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37404b-3a76-47c6-8a15-7a4ff4c120a5", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8aef06e4-6c6a-4941-8fe7-f35cc1c5cd55", "record_id": "flaws_cloudtrail:0000114:8aef06e4-6c6a-4941-8fe7-f35cc1c5cd55", "row_index": 114, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8aef06e4-6c6a-4941-8fe7-f35cc1c5cd55", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd4f5b45-4988-4718-b48c-c10be2ff60c5", "record_id": "flaws_cloudtrail:0000115:fd4f5b45-4988-4718-b48c-c10be2ff60c5", "row_index": 115, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd4f5b45-4988-4718-b48c-c10be2ff60c5", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51c85a72-d18b-4282-9e20-ea0428a005b2", "record_id": "flaws_cloudtrail:0000116:51c85a72-d18b-4282-9e20-ea0428a005b2", "row_index": 116, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51c85a72-d18b-4282-9e20-ea0428a005b2", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "126d304b-3e8e-4f27-a428-e78a04cce8c1", "record_id": "flaws_cloudtrail:0000117:126d304b-3e8e-4f27-a428-e78a04cce8c1", "row_index": 117, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "126d304b-3e8e-4f27-a428-e78a04cce8c1", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "330d404a-0666-44c6-9633-18d63711a1d", "record_id": "flaws_cloudtrail:0000118:330d404a-0666-44c6-9633-18d63711a1d", "row_index": 118, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "330d404a-0666-44c6-9633-18d63711a1d", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b667770-4545-45c9-994a-856946a87716", "record_id": "flaws_cloudtrail:0000119:1b667770-4545-45c9-994a-856946a87716", "row_index": 119, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b667770-4545-45c9-994a-856946a87716", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e928b4c9-ae80-4b75-a99c-356dca63aa4d", "record_id": "flaws_cloudtrail:0000120:e928b4c9-ae80-4b75-a99c-356dca63aa4d", "row_index": 120, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e928b4c9-ae80-4b75-a99c-356dca63aa4d", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dc59fa0-1781-4078-bc03-6ee700fae937", "record_id": "flaws_cloudtrail:0000121:1dc59fa0-1781-4078-bc03-6ee700fae937", "row_index": 121, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dc59fa0-1781-4078-bc03-6ee700fae937", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19125f1-944b-4e21-87c7-c1fd654aff85", "record_id": "flaws_cloudtrail:0000122:19125f1-944b-4e21-87c7-c1fd654aff85", "row_index": 122, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19125f1-944b-4e21-87c7-c1fd654aff85", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "622da426-9aad-48f3-8630-6acb9bcee819", "record_id": "flaws_cloudtrail:0000123:622da426-9aad-48f3-8630-6acb9bcee819", "row_index": 123, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "622da426-9aad-48f3-8630-6acb9bcee819", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08343b5-8683-4cc6-b81a-c4113463a6e6", "record_id": "flaws_cloudtrail:0000124:08343b5-8683-4cc6-b81a-c4113463a6e6", "row_index": 124, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08343b5-8683-4cc6-b81a-c4113463a6e6", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9fe7d38-93ef-4726-9ff2-cec873f237d2", "record_id": "flaws_cloudtrail:0000125:a9fe7d38-93ef-4726-9ff2-cec873f237d2", "row_index": 125, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9fe7d38-93ef-4726-9ff2-cec873f237d2", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42271-866b-455c-8e2d-f4d186e27d71", "record_id": "flaws_cloudtrail:0000126:42271-866b-455c-8e2d-f4d186e27d71", "row_index": 126, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42271-866b-455c-8e2d-f4d186e27d71", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85db694e-4674-4efe-ab3a-77bec14d3571", "record_id": "flaws_cloudtrail:0000127:85db694e-4674-4efe-ab3a-77bec14d3571", "row_index": 127, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85db694e-4674-4efe-ab3a-77bec14d3571", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ce1112b-131e-40c4-bbc1-148353a6d149c", "record_id": "flaws_cloudtrail:0000128:8ce1112b-131e-40c4-bbc1-148353a6d149c", "row_index": 128, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ce1112b-131e-40c4-bbc1-148353a6d149c", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d84dd46a-7b00-482a-a0d4-f1b8ddfa77e1", "record_id": "flaws_cloudtrail:0000129:d84dd46a-7b00-482a-a0d4-f1b8ddfa77e1", "row_index": 129, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d84dd46a-7b00-482a-a0d4-f1b8ddfa77e1", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "611be01b-380a-4daa-8e44-aaf60abd1f91", "record_id": "flaws_cloudtrail:0000130:611be01b-380a-4daa-8e44-aaf60abd1f91", "row_index": 130, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "611be01b-380a-4daa-8e44-aaf60abd1f91", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98850d-8d3c-4ced-97ef-4d389245fa2a", "record_id": "flaws_cloudtrail:0000131:98850d-8d3c-4ced-97ef-4d389245fa2a", "row_index": 131, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98850d-8d3c-4ced-97ef-4d389245fa2a", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "996db76e-0062-435f-9c19-40d64b819cb5", "record_id": "flaws_cloudtrail:0000132:996db76e-0062-435f-9c19-40d64b819cb5", "row_index": 132, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "996db76e-0062-435f-9c19-40d64b819cb5", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91b549ca-5fc1-420e-848b-dde9f9c100c2", "record_id": "flaws_cloudtrail:0000133:91b549ca-5fc1-420e-848b-dde9f9c100c2", "row_index": 133, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91b549ca-5fc1-420e-848b-dde9f9c100c2", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e3af3ce-d8f1-4ba6-81c8-11b225f1052b", "record_id": "flaws_cloudtrail:0000134:3e3af3ce-d8f1-4ba6-81c8-11b225f1052b", "row_index": 134, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e3af3ce-d8f1-4ba6-81c8-11b225f1052b", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b42ccf78-a4a5-49c9-ac37-551dd4c485a7", "record_id": "flaws_cloudtrail:0000135:b42ccf78-a4a5-49c9-ac37-551dd4c485a7", "row_index": 135, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b42ccf78-a4a5-49c9-ac37-551dd4c485a7", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d97ff1e7-ca1a-428e-8417-c90ef0b73f78", "record_id": "flaws_cloudtrail:0000136:d97ff1e7-ca1a-428e-8417-c90ef0b73f78", "row_index": 136, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d97ff1e7-ca1a-428e-8417-c90ef0b73f78", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8acf2137-fd51-4d80-b1e3-5adb143dc63c", "record_id": "flaws_cloudtrail:0000137:8acf2137-fd51-4d80-b1e3-5adb143dc63c", "row_index": 137, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeInstanceAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8acf2137-fd51-4d80-b1e3-5adb143dc63c", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeInstanceAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instanceId": "i-aa2d3b42e5c6e801a", "attribute": "userData"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aba2162-c538-4080-bf74-3604cdf1cff3", "record_id": "flaws_cloudtrail:0000138:9aba2162-c538-4080-bf74-3604cdf1cff3", "row_index": 138, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aba2162-c538-4080-bf74-3604cdf1cff3", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a73c885-1513-4239-ad64-c2b35063a7ec", "record_id": "flaws_cloudtrail:0000139:3a73c885-1513-4239-ad64-c2b35063a7ec", "row_index": 139, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a73c885-1513-4239-ad64-c2b35063a7ec", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c64a20d-c2da-4644-9b4b-018cf1765782", "record_id": "flaws_cloudtrail:0000140:5c64a20d-c2da-4644-9b4b-018cf1765782", "row_index": 140, "timestamp": "2019-07-08T15:22:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c64a20d-c2da-4644-9b4b-018cf1765782", "eventTime": "2019-07-08T15:22:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ddb53af-c623-4929-8b11-7fc90a540d90", "record_id": "flaws_cloudtrail:0000141:3ddb53af-c623-4929-8b11-7fc90a540d90", "row_index": 141, "timestamp": "2019-07-08T15:29:09Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1866, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ddb53af-c623-4929-8b11-7fc90a540d90", "eventTime": "2019-07-08T15:29:09Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALBJNZHQC2XMGXSSH", "expiration": "Jul 8, 2019 10:01:18 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ddb53af-c623-4929-8b11-7fc90a540d90", "record_id": "flaws_cloudtrail:0000142:3ddb53af-c623-4929-8b11-7fc90a540d90", "row_index": 142, "timestamp": "2019-07-08T15:29:09Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1866, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ddb53af-c623-4929-8b11-7fc90a540d90", "eventTime": "2019-07-08T15:29:09Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIALBJNZHQC2XMGXSSH", "expiration": "Jul 8, 2019 10:01:18 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64caeb70-dbde-4aac-92c6-1966452dc87d", "record_id": "flaws_cloudtrail:0000143:64caeb70-dbde-4aac-92c6-1966452dc87d", "row_index": 143, "timestamp": "2019-07-08T15:34:37Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZKHS8RXSYDLA41I1", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.74.119.222", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 505, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64caeb70-dbde-4aac-92c6-1966452dc87d", "eventTime": "2019-07-08T15:34:37Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.74.119.222", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZKHS8RXSYDLA41I1", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7036443-be25-4370-a81e-107d20d6178c", "record_id": "flaws_cloudtrail:0000144:f7036443-be25-4370-a81e-107d20d6178c", "row_index": 144, "timestamp": "2019-07-08T15:35:30Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZKHS8RXSYDLA41I1", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.74.119.222", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 534, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7036443-be25-4370-a81e-107d20d6178c", "eventTime": "2019-07-08T15:35:30Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.74.119.222", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZKHS8RXSYDLA41I1", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5097a981-7a8d-4fa5-aa49-7abb3bed548c", "record_id": "flaws_cloudtrail:0000145:5097a981-7a8d-4fa5-aa49-7abb3bed548c", "row_index": 145, "timestamp": "2019-07-08T15:37:04Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZKHS8RXSYDLA41I1", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.74.119.222", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 544, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5097a981-7a8d-4fa5-aa49-7abb3bed548c", "eventTime": "2019-07-08T15:37:04Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.74.119.222", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZKHS8RXSYDLA41I1", "userName": "backup"}, "requestParameters": {"userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7428ca3-40d5-4e49-b0b0-7366d67a97ea", "record_id": "flaws_cloudtrail:0000146:e7428ca3-40d5-4e49-b0b0-7366d67a97ea", "row_index": 146, "timestamp": "2019-07-08T15:38:54Z", "event_type": "CreateUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZKHS8RXSYDLA41I1", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.74.119.222", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:user/backup-bot-356"], "raw_record_size_bytes": 618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7428ca3-40d5-4e49-b0b0-7366d67a97ea", "eventTime": "2019-07-08T15:38:54Z", "eventName": "CreateUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.74.119.222", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZKHS8RXSYDLA41I1", "userName": "backup"}, "requestParameters": {"userName": "backup-bot-356"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/backup-bot-356"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07769140-e775-4bb5-a05b-dfc66d732765", "record_id": "flaws_cloudtrail:0000147:07769140-e775-4bb5-a05b-dfc66d732765", "row_index": 147, "timestamp": "2019-07-08T15:39:15Z", "event_type": "CreateAccessKey", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZKHS8RXSYDLA41I1", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.74.119.222", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:user/backup-bot-356"], "raw_record_size_bytes": 623, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07769140-e775-4bb5-a05b-dfc66d732765", "eventTime": "2019-07-08T15:39:15Z", "eventName": "CreateAccessKey", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.74.119.222", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZKHS8RXSYDLA41I1", "userName": "backup"}, "requestParameters": {"userName": "backup-bot-356"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/backup-bot-356"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72b937a1-d2e9-4af4-8e90-8b29aef0b678", "record_id": "flaws_cloudtrail:0000148:72b937a1-d2e9-4af4-8e90-8b29aef0b678", "row_index": 148, "timestamp": "2019-07-08T15:40:30Z", "event_type": "AttachUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZKHS8RXSYDLA41I1", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "126.74.119.222", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:user/backup-bot-356", "arn:aws:iam::aws:policy/AmazonS3FullAccess"], "raw_record_size_bytes": 734, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72b937a1-d2e9-4af4-8e90-8b29aef0b678", "eventTime": "2019-07-08T15:40:30Z", "eventName": "AttachUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "126.74.119.222", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZKHS8RXSYDLA41I1", "userName": "backup"}, "requestParameters": {"userName": "backup-bot-356", "policyArn": "arn:aws:iam::aws:policy/AmazonS3FullAccess"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/backup-bot-356"}, {"ARN": "arn:aws:iam::aws:policy/AmazonS3FullAccess"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "724067-f023-4f59-a933-c82a793711ef", "record_id": "flaws_cloudtrail:0000149:724067-f023-4f59-a933-c82a793711ef", "row_index": 149, "timestamp": "2019-07-08T15:43:23Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "724067-f023-4f59-a933-c82a793711ef", "eventTime": "2019-07-08T15:43:23Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a019ce7c-6214-473c-9160-99866be067c6", "record_id": "flaws_cloudtrail:0000150:a019ce7c-6214-473c-9160-99866be067c6", "row_index": 150, "timestamp": "2019-07-08T15:43:23Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a019ce7c-6214-473c-9160-99866be067c6", "eventTime": "2019-07-08T15:43:23Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "724067-f023-4f59-a933-c82a793711ef", "record_id": "flaws_cloudtrail:0000151:724067-f023-4f59-a933-c82a793711ef", "row_index": 151, "timestamp": "2019-07-08T15:43:23Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "724067-f023-4f59-a933-c82a793711ef", "eventTime": "2019-07-08T15:43:23Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a019ce7c-6214-473c-9160-99866be067c6", "record_id": "flaws_cloudtrail:0000152:a019ce7c-6214-473c-9160-99866be067c6", "row_index": 152, "timestamp": "2019-07-08T15:43:23Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a019ce7c-6214-473c-9160-99866be067c6", "eventTime": "2019-07-08T15:43:23Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19585-f207-4f77-9575-1fde91d193d3", "record_id": "flaws_cloudtrail:0000153:19585-f207-4f77-9575-1fde91d193d3", "row_index": 153, "timestamp": "2019-07-08T15:43:24Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19585-f207-4f77-9575-1fde91d193d3", "eventTime": "2019-07-08T15:43:24Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa0bc62f-821c-435d-80c3-9538b5ed0f7e", "record_id": "flaws_cloudtrail:0000154:fa0bc62f-821c-435d-80c3-9538b5ed0f7e", "row_index": 154, "timestamp": "2019-07-08T15:43:24Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa0bc62f-821c-435d-80c3-9538b5ed0f7e", "eventTime": "2019-07-08T15:43:24Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19585-f207-4f77-9575-1fde91d193d3", "record_id": "flaws_cloudtrail:0000155:19585-f207-4f77-9575-1fde91d193d3", "row_index": 155, "timestamp": "2019-07-08T15:43:24Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19585-f207-4f77-9575-1fde91d193d3", "eventTime": "2019-07-08T15:43:24Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa0bc62f-821c-435d-80c3-9538b5ed0f7e", "record_id": "flaws_cloudtrail:0000156:fa0bc62f-821c-435d-80c3-9538b5ed0f7e", "row_index": 156, "timestamp": "2019-07-08T15:43:24Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa0bc62f-821c-435d-80c3-9538b5ed0f7e", "eventTime": "2019-07-08T15:43:24Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "885df1cf-d4bf-4cd5-89d3-f7ec9756e467", "record_id": "flaws_cloudtrail:0000157:885df1cf-d4bf-4cd5-89d3-f7ec9756e467", "row_index": 157, "timestamp": "2019-07-08T15:43:25Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "885df1cf-d4bf-4cd5-89d3-f7ec9756e467", "eventTime": "2019-07-08T15:43:25Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38d350cb-c583-4e56-8174-bd4023f0e819", "record_id": "flaws_cloudtrail:0000158:38d350cb-c583-4e56-8174-bd4023f0e819", "row_index": 158, "timestamp": "2019-07-08T15:43:25Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38d350cb-c583-4e56-8174-bd4023f0e819", "eventTime": "2019-07-08T15:43:25Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "885df1cf-d4bf-4cd5-89d3-f7ec9756e467", "record_id": "flaws_cloudtrail:0000159:885df1cf-d4bf-4cd5-89d3-f7ec9756e467", "row_index": 159, "timestamp": "2019-07-08T15:43:25Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "885df1cf-d4bf-4cd5-89d3-f7ec9756e467", "eventTime": "2019-07-08T15:43:25Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38d350cb-c583-4e56-8174-bd4023f0e819", "record_id": "flaws_cloudtrail:0000160:38d350cb-c583-4e56-8174-bd4023f0e819", "row_index": 160, "timestamp": "2019-07-08T15:43:25Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38d350cb-c583-4e56-8174-bd4023f0e819", "eventTime": "2019-07-08T15:43:25Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c5bad00-5bdf-4ba9-969d-1f4838b25f22", "record_id": "flaws_cloudtrail:0000161:4c5bad00-5bdf-4ba9-969d-1f4838b25f22", "row_index": 161, "timestamp": "2019-07-08T15:43:26Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c5bad00-5bdf-4ba9-969d-1f4838b25f22", "eventTime": "2019-07-08T15:43:26Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b25fbcad-4912-4636-84f3-d7ff2720ae2a", "record_id": "flaws_cloudtrail:0000162:b25fbcad-4912-4636-84f3-d7ff2720ae2a", "row_index": 162, "timestamp": "2019-07-08T15:43:26Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b25fbcad-4912-4636-84f3-d7ff2720ae2a", "eventTime": "2019-07-08T15:43:26Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c5bad00-5bdf-4ba9-969d-1f4838b25f22", "record_id": "flaws_cloudtrail:0000163:4c5bad00-5bdf-4ba9-969d-1f4838b25f22", "row_index": 163, "timestamp": "2019-07-08T15:43:26Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c5bad00-5bdf-4ba9-969d-1f4838b25f22", "eventTime": "2019-07-08T15:43:26Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b25fbcad-4912-4636-84f3-d7ff2720ae2a", "record_id": "flaws_cloudtrail:0000164:b25fbcad-4912-4636-84f3-d7ff2720ae2a", "row_index": 164, "timestamp": "2019-07-08T15:43:26Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b25fbcad-4912-4636-84f3-d7ff2720ae2a", "eventTime": "2019-07-08T15:43:26Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7dcb23f-1cd4-4878-92d6-08a88dbd6f56", "record_id": "flaws_cloudtrail:0000165:c7dcb23f-1cd4-4878-92d6-08a88dbd6f56", "row_index": 165, "timestamp": "2019-07-08T15:43:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7dcb23f-1cd4-4878-92d6-08a88dbd6f56", "eventTime": "2019-07-08T15:43:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7937c430-99e4-44f3-83cf-cf3f62821813", "record_id": "flaws_cloudtrail:0000166:7937c430-99e4-44f3-83cf-cf3f62821813", "row_index": 166, "timestamp": "2019-07-08T15:43:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7937c430-99e4-44f3-83cf-cf3f62821813", "eventTime": "2019-07-08T15:43:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7dcb23f-1cd4-4878-92d6-08a88dbd6f56", "record_id": "flaws_cloudtrail:0000167:c7dcb23f-1cd4-4878-92d6-08a88dbd6f56", "row_index": 167, "timestamp": "2019-07-08T15:43:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7dcb23f-1cd4-4878-92d6-08a88dbd6f56", "eventTime": "2019-07-08T15:43:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7937c430-99e4-44f3-83cf-cf3f62821813", "record_id": "flaws_cloudtrail:0000168:7937c430-99e4-44f3-83cf-cf3f62821813", "row_index": 168, "timestamp": "2019-07-08T15:43:27Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7937c430-99e4-44f3-83cf-cf3f62821813", "eventTime": "2019-07-08T15:43:27Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26ff9942-7363-4e97-84fa-ae8379b9e9f0", "record_id": "flaws_cloudtrail:0000169:26ff9942-7363-4e97-84fa-ae8379b9e9f0", "row_index": 169, "timestamp": "2019-07-08T15:43:28Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26ff9942-7363-4e97-84fa-ae8379b9e9f0", "eventTime": "2019-07-08T15:43:28Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26ff9942-7363-4e97-84fa-ae8379b9e9f0", "record_id": "flaws_cloudtrail:0000170:26ff9942-7363-4e97-84fa-ae8379b9e9f0", "row_index": 170, "timestamp": "2019-07-08T15:43:28Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26ff9942-7363-4e97-84fa-ae8379b9e9f0", "eventTime": "2019-07-08T15:43:28Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee8ef788-b21d-4c36-a550-3c5536c85c5d", "record_id": "flaws_cloudtrail:0000171:ee8ef788-b21d-4c36-a550-3c5536c85c5d", "row_index": 171, "timestamp": "2019-07-08T15:43:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee8ef788-b21d-4c36-a550-3c5536c85c5d", "eventTime": "2019-07-08T15:43:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91578fe-206f-4788-b882-13467de5a7bb", "record_id": "flaws_cloudtrail:0000172:91578fe-206f-4788-b882-13467de5a7bb", "row_index": 172, "timestamp": "2019-07-08T15:43:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91578fe-206f-4788-b882-13467de5a7bb", "eventTime": "2019-07-08T15:43:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee8ef788-b21d-4c36-a550-3c5536c85c5d", "record_id": "flaws_cloudtrail:0000173:ee8ef788-b21d-4c36-a550-3c5536c85c5d", "row_index": 173, "timestamp": "2019-07-08T15:43:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee8ef788-b21d-4c36-a550-3c5536c85c5d", "eventTime": "2019-07-08T15:43:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91578fe-206f-4788-b882-13467de5a7bb", "record_id": "flaws_cloudtrail:0000174:91578fe-206f-4788-b882-13467de5a7bb", "row_index": 174, "timestamp": "2019-07-08T15:43:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91578fe-206f-4788-b882-13467de5a7bb", "eventTime": "2019-07-08T15:43:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d47989b2-d1db-41cc-84b4-6fb4051c39df", "record_id": "flaws_cloudtrail:0000175:d47989b2-d1db-41cc-84b4-6fb4051c39df", "row_index": 175, "timestamp": "2019-07-08T15:43:30Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d47989b2-d1db-41cc-84b4-6fb4051c39df", "eventTime": "2019-07-08T15:43:30Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bf300ad-542c-40cc-ae27-c2a15e02ffa7", "record_id": "flaws_cloudtrail:0000176:6bf300ad-542c-40cc-ae27-c2a15e02ffa7", "row_index": 176, "timestamp": "2019-07-08T15:43:30Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bf300ad-542c-40cc-ae27-c2a15e02ffa7", "eventTime": "2019-07-08T15:43:30Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d47989b2-d1db-41cc-84b4-6fb4051c39df", "record_id": "flaws_cloudtrail:0000177:d47989b2-d1db-41cc-84b4-6fb4051c39df", "row_index": 177, "timestamp": "2019-07-08T15:43:30Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d47989b2-d1db-41cc-84b4-6fb4051c39df", "eventTime": "2019-07-08T15:43:30Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bf300ad-542c-40cc-ae27-c2a15e02ffa7", "record_id": "flaws_cloudtrail:0000178:6bf300ad-542c-40cc-ae27-c2a15e02ffa7", "row_index": 178, "timestamp": "2019-07-08T15:43:30Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bf300ad-542c-40cc-ae27-c2a15e02ffa7", "eventTime": "2019-07-08T15:43:30Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bea44cc3-a6ee-48b6-a015-7613d2c6c2ab", "record_id": "flaws_cloudtrail:0000179:bea44cc3-a6ee-48b6-a015-7613d2c6c2ab", "row_index": 179, "timestamp": "2019-07-08T15:43:31Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bea44cc3-a6ee-48b6-a015-7613d2c6c2ab", "eventTime": "2019-07-08T15:43:31Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acd494453-34dc-4db0-9292-b9b9d5de8b39", "record_id": "flaws_cloudtrail:0000180:acd494453-34dc-4db0-9292-b9b9d5de8b39", "row_index": 180, "timestamp": "2019-07-08T15:43:31Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acd494453-34dc-4db0-9292-b9b9d5de8b39", "eventTime": "2019-07-08T15:43:31Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bea44cc3-a6ee-48b6-a015-7613d2c6c2ab", "record_id": "flaws_cloudtrail:0000181:bea44cc3-a6ee-48b6-a015-7613d2c6c2ab", "row_index": 181, "timestamp": "2019-07-08T15:43:31Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bea44cc3-a6ee-48b6-a015-7613d2c6c2ab", "eventTime": "2019-07-08T15:43:31Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acd494453-34dc-4db0-9292-b9b9d5de8b39", "record_id": "flaws_cloudtrail:0000182:acd494453-34dc-4db0-9292-b9b9d5de8b39", "row_index": 182, "timestamp": "2019-07-08T15:43:31Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acd494453-34dc-4db0-9292-b9b9d5de8b39", "eventTime": "2019-07-08T15:43:31Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "734644-d841-4c90-8343-8061b780b710", "record_id": "flaws_cloudtrail:0000183:734644-d841-4c90-8343-8061b780b710", "row_index": 183, "timestamp": "2019-07-08T15:43:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "734644-d841-4c90-8343-8061b780b710", "eventTime": "2019-07-08T15:43:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "549f8f29-c1c0-48d4-bc7d-48702239ffb2", "record_id": "flaws_cloudtrail:0000184:549f8f29-c1c0-48d4-bc7d-48702239ffb2", "row_index": 184, "timestamp": "2019-07-08T15:43:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "549f8f29-c1c0-48d4-bc7d-48702239ffb2", "eventTime": "2019-07-08T15:43:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "734644-d841-4c90-8343-8061b780b710", "record_id": "flaws_cloudtrail:0000185:734644-d841-4c90-8343-8061b780b710", "row_index": 185, "timestamp": "2019-07-08T15:43:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "734644-d841-4c90-8343-8061b780b710", "eventTime": "2019-07-08T15:43:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "549f8f29-c1c0-48d4-bc7d-48702239ffb2", "record_id": "flaws_cloudtrail:0000186:549f8f29-c1c0-48d4-bc7d-48702239ffb2", "row_index": 186, "timestamp": "2019-07-08T15:43:32Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "549f8f29-c1c0-48d4-bc7d-48702239ffb2", "eventTime": "2019-07-08T15:43:32Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "925007bd0-5ddc-4679-a7fa-b5ca738aa0ad", "record_id": "flaws_cloudtrail:0000187:925007bd0-5ddc-4679-a7fa-b5ca738aa0ad", "row_index": 187, "timestamp": "2019-07-08T15:43:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "925007bd0-5ddc-4679-a7fa-b5ca738aa0ad", "eventTime": "2019-07-08T15:43:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58aa4ee8-3ba1-4c47-b6fe-3d72004dd802", "record_id": "flaws_cloudtrail:0000188:58aa4ee8-3ba1-4c47-b6fe-3d72004dd802", "row_index": 188, "timestamp": "2019-07-08T15:43:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58aa4ee8-3ba1-4c47-b6fe-3d72004dd802", "eventTime": "2019-07-08T15:43:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "925007bd0-5ddc-4679-a7fa-b5ca738aa0ad", "record_id": "flaws_cloudtrail:0000189:925007bd0-5ddc-4679-a7fa-b5ca738aa0ad", "row_index": 189, "timestamp": "2019-07-08T15:43:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "925007bd0-5ddc-4679-a7fa-b5ca738aa0ad", "eventTime": "2019-07-08T15:43:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58aa4ee8-3ba1-4c47-b6fe-3d72004dd802", "record_id": "flaws_cloudtrail:0000190:58aa4ee8-3ba1-4c47-b6fe-3d72004dd802", "row_index": 190, "timestamp": "2019-07-08T15:43:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58aa4ee8-3ba1-4c47-b6fe-3d72004dd802", "eventTime": "2019-07-08T15:43:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "137d5269-9703-480b-b94e-3d0a5a9bd9ca", "record_id": "flaws_cloudtrail:0000191:137d5269-9703-480b-b94e-3d0a5a9bd9ca", "row_index": 191, "timestamp": "2019-07-08T15:43:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "137d5269-9703-480b-b94e-3d0a5a9bd9ca", "eventTime": "2019-07-08T15:43:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13ccfda1-b63b-40ad-9d50-9db949f95d45", "record_id": "flaws_cloudtrail:0000192:13ccfda1-b63b-40ad-9d50-9db949f95d45", "row_index": 192, "timestamp": "2019-07-08T15:43:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13ccfda1-b63b-40ad-9d50-9db949f95d45", "eventTime": "2019-07-08T15:43:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "137d5269-9703-480b-b94e-3d0a5a9bd9ca", "record_id": "flaws_cloudtrail:0000193:137d5269-9703-480b-b94e-3d0a5a9bd9ca", "row_index": 193, "timestamp": "2019-07-08T15:43:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "137d5269-9703-480b-b94e-3d0a5a9bd9ca", "eventTime": "2019-07-08T15:43:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13ccfda1-b63b-40ad-9d50-9db949f95d45", "record_id": "flaws_cloudtrail:0000194:13ccfda1-b63b-40ad-9d50-9db949f95d45", "row_index": 194, "timestamp": "2019-07-08T15:43:34Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13ccfda1-b63b-40ad-9d50-9db949f95d45", "eventTime": "2019-07-08T15:43:34Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c3fec1d-972d-4b16-8e4c-1eadc6534397", "record_id": "flaws_cloudtrail:0000195:6c3fec1d-972d-4b16-8e4c-1eadc6534397", "row_index": 195, "timestamp": "2019-07-08T15:43:35Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c3fec1d-972d-4b16-8e4c-1eadc6534397", "eventTime": "2019-07-08T15:43:35Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": true}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "181bf3e7-d11e-408a-8478-54c198e760910", "record_id": "flaws_cloudtrail:0000196:181bf3e7-d11e-408a-8478-54c198e760910", "row_index": 196, "timestamp": "2019-07-08T15:43:35Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "181bf3e7-d11e-408a-8478-54c198e760910", "eventTime": "2019-07-08T15:43:35Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "407ba6ef-215c-4c14-9410-d076f0e35cfd", "record_id": "flaws_cloudtrail:0000197:407ba6ef-215c-4c14-9410-d076f0e35cfd", "row_index": 197, "timestamp": "2019-07-08T15:43:35Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "407ba6ef-215c-4c14-9410-d076f0e35cfd", "eventTime": "2019-07-08T15:43:35Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5d2b126-93c1-47b2-8f2f-a936f3aa75b9", "record_id": "flaws_cloudtrail:0000198:c5d2b126-93c1-47b2-8f2f-a936f3aa75b9", "row_index": 198, "timestamp": "2019-07-08T15:43:35Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5d2b126-93c1-47b2-8f2f-a936f3aa75b9", "eventTime": "2019-07-08T15:43:35Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcb4b33f-b388-4917-b14f-c6abea62e39d", "record_id": "flaws_cloudtrail:0000199:dcb4b33f-b388-4917-b14f-c6abea62e39d", "row_index": 199, "timestamp": "2019-07-08T15:43:35Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcb4b33f-b388-4917-b14f-c6abea62e39d", "eventTime": "2019-07-08T15:43:35Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22ba6b54-48ac-4329-b071-8cc6cecbddbf", "record_id": "flaws_cloudtrail:0000200:22ba6b54-48ac-4329-b071-8cc6cecbddbf", "row_index": 200, "timestamp": "2019-07-08T15:43:35Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22ba6b54-48ac-4329-b071-8cc6cecbddbf", "eventTime": "2019-07-08T15:43:35Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "540736b-49d7-4696-b903-9e74160a007d", "record_id": "flaws_cloudtrail:0000201:540736b-49d7-4696-b903-9e74160a007d", "row_index": 201, "timestamp": "2019-07-08T15:43:35Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "540736b-49d7-4696-b903-9e74160a007d", "eventTime": "2019-07-08T15:43:35Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c3fec1d-972d-4b16-8e4c-1eadc6534397", "record_id": "flaws_cloudtrail:0000202:6c3fec1d-972d-4b16-8e4c-1eadc6534397", "row_index": 202, "timestamp": "2019-07-08T15:43:35Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c3fec1d-972d-4b16-8e4c-1eadc6534397", "eventTime": "2019-07-08T15:43:35Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": true}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "181bf3e7-d11e-408a-8478-54c198e760910", "record_id": "flaws_cloudtrail:0000203:181bf3e7-d11e-408a-8478-54c198e760910", "row_index": 203, "timestamp": "2019-07-08T15:43:35Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "181bf3e7-d11e-408a-8478-54c198e760910", "eventTime": "2019-07-08T15:43:35Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "407ba6ef-215c-4c14-9410-d076f0e35cfd", "record_id": "flaws_cloudtrail:0000204:407ba6ef-215c-4c14-9410-d076f0e35cfd", "row_index": 204, "timestamp": "2019-07-08T15:43:35Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "407ba6ef-215c-4c14-9410-d076f0e35cfd", "eventTime": "2019-07-08T15:43:35Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5d2b126-93c1-47b2-8f2f-a936f3aa75b9", "record_id": "flaws_cloudtrail:0000205:c5d2b126-93c1-47b2-8f2f-a936f3aa75b9", "row_index": 205, "timestamp": "2019-07-08T15:43:35Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5d2b126-93c1-47b2-8f2f-a936f3aa75b9", "eventTime": "2019-07-08T15:43:35Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcb4b33f-b388-4917-b14f-c6abea62e39d", "record_id": "flaws_cloudtrail:0000206:dcb4b33f-b388-4917-b14f-c6abea62e39d", "row_index": 206, "timestamp": "2019-07-08T15:43:35Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcb4b33f-b388-4917-b14f-c6abea62e39d", "eventTime": "2019-07-08T15:43:35Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22ba6b54-48ac-4329-b071-8cc6cecbddbf", "record_id": "flaws_cloudtrail:0000207:22ba6b54-48ac-4329-b071-8cc6cecbddbf", "row_index": 207, "timestamp": "2019-07-08T15:43:35Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22ba6b54-48ac-4329-b071-8cc6cecbddbf", "eventTime": "2019-07-08T15:43:35Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "540736b-49d7-4696-b903-9e74160a007d", "record_id": "flaws_cloudtrail:0000208:540736b-49d7-4696-b903-9e74160a007d", "row_index": 208, "timestamp": "2019-07-08T15:43:35Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "540736b-49d7-4696-b903-9e74160a007d", "eventTime": "2019-07-08T15:43:35Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "811c271e-cec4-43d5-ad95-0e971de87e22", "record_id": "flaws_cloudtrail:0000209:811c271e-cec4-43d5-ad95-0e971de87e22", "row_index": 209, "timestamp": "2019-07-08T15:43:37Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "811c271e-cec4-43d5-ad95-0e971de87e22", "eventTime": "2019-07-08T15:43:37Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d72bc78-ff07-4b01-a79b-7513a9bbaf62", "record_id": "flaws_cloudtrail:0000210:3d72bc78-ff07-4b01-a79b-7513a9bbaf62", "row_index": 210, "timestamp": "2019-07-08T15:43:37Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d72bc78-ff07-4b01-a79b-7513a9bbaf62", "eventTime": "2019-07-08T15:43:37Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69dd43c1-5c85-420f-a87b-ea799548957e", "record_id": "flaws_cloudtrail:0000211:69dd43c1-5c85-420f-a87b-ea799548957e", "row_index": 211, "timestamp": "2019-07-08T15:43:37Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69dd43c1-5c85-420f-a87b-ea799548957e", "eventTime": "2019-07-08T15:43:37Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e905fbc0-6123-41d5-bb53-2b651fa1e832", "record_id": "flaws_cloudtrail:0000212:e905fbc0-6123-41d5-bb53-2b651fa1e832", "row_index": 212, "timestamp": "2019-07-08T15:43:37Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e905fbc0-6123-41d5-bb53-2b651fa1e832", "eventTime": "2019-07-08T15:43:37Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f4a7145-649b-478d-9627-27fe27dc354b", "record_id": "flaws_cloudtrail:0000213:7f4a7145-649b-478d-9627-27fe27dc354b", "row_index": 213, "timestamp": "2019-07-08T15:43:37Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f4a7145-649b-478d-9627-27fe27dc354b", "eventTime": "2019-07-08T15:43:37Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3755b10-f386-4e62-b58d-066e4d6c8e2a", "record_id": "flaws_cloudtrail:0000214:f3755b10-f386-4e62-b58d-066e4d6c8e2a", "row_index": 214, "timestamp": "2019-07-08T15:43:37Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3755b10-f386-4e62-b58d-066e4d6c8e2a", "eventTime": "2019-07-08T15:43:37Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d616c5ae-564c-4627-bb46-3bc76f841ef5", "record_id": "flaws_cloudtrail:0000215:d616c5ae-564c-4627-bb46-3bc76f841ef5", "row_index": 215, "timestamp": "2019-07-08T15:43:37Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d616c5ae-564c-4627-bb46-3bc76f841ef5", "eventTime": "2019-07-08T15:43:37Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "811c271e-cec4-43d5-ad95-0e971de87e22", "record_id": "flaws_cloudtrail:0000216:811c271e-cec4-43d5-ad95-0e971de87e22", "row_index": 216, "timestamp": "2019-07-08T15:43:37Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "811c271e-cec4-43d5-ad95-0e971de87e22", "eventTime": "2019-07-08T15:43:37Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d72bc78-ff07-4b01-a79b-7513a9bbaf62", "record_id": "flaws_cloudtrail:0000217:3d72bc78-ff07-4b01-a79b-7513a9bbaf62", "row_index": 217, "timestamp": "2019-07-08T15:43:37Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d72bc78-ff07-4b01-a79b-7513a9bbaf62", "eventTime": "2019-07-08T15:43:37Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69dd43c1-5c85-420f-a87b-ea799548957e", "record_id": "flaws_cloudtrail:0000218:69dd43c1-5c85-420f-a87b-ea799548957e", "row_index": 218, "timestamp": "2019-07-08T15:43:37Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69dd43c1-5c85-420f-a87b-ea799548957e", "eventTime": "2019-07-08T15:43:37Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e905fbc0-6123-41d5-bb53-2b651fa1e832", "record_id": "flaws_cloudtrail:0000219:e905fbc0-6123-41d5-bb53-2b651fa1e832", "row_index": 219, "timestamp": "2019-07-08T15:43:37Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e905fbc0-6123-41d5-bb53-2b651fa1e832", "eventTime": "2019-07-08T15:43:37Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f4a7145-649b-478d-9627-27fe27dc354b", "record_id": "flaws_cloudtrail:0000220:7f4a7145-649b-478d-9627-27fe27dc354b", "row_index": 220, "timestamp": "2019-07-08T15:43:37Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f4a7145-649b-478d-9627-27fe27dc354b", "eventTime": "2019-07-08T15:43:37Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3755b10-f386-4e62-b58d-066e4d6c8e2a", "record_id": "flaws_cloudtrail:0000221:f3755b10-f386-4e62-b58d-066e4d6c8e2a", "row_index": 221, "timestamp": "2019-07-08T15:43:37Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3755b10-f386-4e62-b58d-066e4d6c8e2a", "eventTime": "2019-07-08T15:43:37Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d616c5ae-564c-4627-bb46-3bc76f841ef5", "record_id": "flaws_cloudtrail:0000222:d616c5ae-564c-4627-bb46-3bc76f841ef5", "row_index": 222, "timestamp": "2019-07-08T15:43:37Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d616c5ae-564c-4627-bb46-3bc76f841ef5", "eventTime": "2019-07-08T15:43:37Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b9fb647-40f1-435a-b613-c7382c0b6c24", "record_id": "flaws_cloudtrail:0000223:5b9fb647-40f1-435a-b613-c7382c0b6c24", "row_index": 223, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b9fb647-40f1-435a-b613-c7382c0b6c24", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2799d919-831c-43da-a76c-805140c4c0c6", "record_id": "flaws_cloudtrail:0000224:2799d919-831c-43da-a76c-805140c4c0c6", "row_index": 224, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2799d919-831c-43da-a76c-805140c4c0c6", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d12440e-509f-468f-a158-8d742e06beaf", "record_id": "flaws_cloudtrail:0000225:6d12440e-509f-468f-a158-8d742e06beaf", "row_index": 225, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d12440e-509f-468f-a158-8d742e06beaf", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4fe8fe0-9322-4f04-97e9-2c5fedd02d8f", "record_id": "flaws_cloudtrail:0000226:d4fe8fe0-9322-4f04-97e9-2c5fedd02d8f", "row_index": 226, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4fe8fe0-9322-4f04-97e9-2c5fedd02d8f", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b700ad5-d7fb-45ed-83e4-02a50ac0b2d1", "record_id": "flaws_cloudtrail:0000227:7b700ad5-d7fb-45ed-83e4-02a50ac0b2d1", "row_index": 227, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b700ad5-d7fb-45ed-83e4-02a50ac0b2d1", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02597-3aed-4bc1-8237-5c32d71566a5", "record_id": "flaws_cloudtrail:0000228:02597-3aed-4bc1-8237-5c32d71566a5", "row_index": 228, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02597-3aed-4bc1-8237-5c32d71566a5", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a2b86c7-b570-45e1-a08e-baa262f7f857", "record_id": "flaws_cloudtrail:0000229:8a2b86c7-b570-45e1-a08e-baa262f7f857", "row_index": 229, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a2b86c7-b570-45e1-a08e-baa262f7f857", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/aws-service-role/AWSOrganizationsServiceTrustPolicy", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aa6fcd8-d614-459d-81e0-80691d0d9de9", "record_id": "flaws_cloudtrail:0000230:5aa6fcd8-d614-459d-81e0-80691d0d9de9", "row_index": 230, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aa6fcd8-d614-459d-81e0-80691d0d9de9", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForSupport"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93e78b31-8494-4f37-a048-54af927483af", "record_id": "flaws_cloudtrail:0000231:93e78b31-8494-4f37-a048-54af927483af", "row_index": 231, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93e78b31-8494-4f37-a048-54af927483af", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19a798bc-b1cb-477b-abe7-3cc804e61cd1", "record_id": "flaws_cloudtrail:0000232:19a798bc-b1cb-477b-abe7-3cc804e61cd1", "row_index": 232, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19a798bc-b1cb-477b-abe7-3cc804e61cd1", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e11737-378e-4e59-a929-ec4ec4f4311c", "record_id": "flaws_cloudtrail:0000233:e11737-378e-4e59-a929-ec4ec4f4311c", "row_index": 233, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e11737-378e-4e59-a929-ec4ec4f4311c", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e64b40b7-561b-4963-90ee-c9e772f72d44", "record_id": "flaws_cloudtrail:0000234:e64b40b7-561b-4963-90ee-c9e772f72d44", "row_index": 234, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e64b40b7-561b-4963-90ee-c9e772f72d44", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForOrganizations"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca1857c1-1435-460e-b925-63630d7d", "record_id": "flaws_cloudtrail:0000235:ca1857c1-1435-460e-b925-63630d7d", "row_index": 235, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca1857c1-1435-460e-b925-63630d7d", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/config-role-us-west-2_AWSConfigDeliveryPermissions_us-west-2", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc3cc7d5-ca04-42d9-bf17-3efa3086a3ca", "record_id": "flaws_cloudtrail:0000236:bc3cc7d5-ca04-42d9-bf17-3efa3086a3ca", "row_index": 236, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc3cc7d5-ca04-42d9-bf17-3efa3086a3ca", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/job-function/ViewOnlyAccess", "versionId": "v7"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e6f1840-fcf7-4b22-98b6-d265bb719a17", "record_id": "flaws_cloudtrail:0000237:2e6f1840-fcf7-4b22-98b6-d265bb719a17", "row_index": 237, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e6f1840-fcf7-4b22-98b6-d265bb719a17", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cf102d5-15cd-4dcb-b129-267b2d5d04db", "record_id": "flaws_cloudtrail:0000238:3cf102d5-15cd-4dcb-b129-267b2d5d04db", "row_index": 238, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cf102d5-15cd-4dcb-b129-267b2d5d04db", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonAthenaFullAccess", "versionId": "v5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86212-7de4-4de7-9f7c-705f6738c19f", "record_id": "flaws_cloudtrail:0000239:86212-7de4-4de7-9f7c-705f6738c19f", "row_index": 239, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86212-7de4-4de7-9f7c-705f6738c19f", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb7c325d-6d02-4405-afb1-2f3397e7e29b", "record_id": "flaws_cloudtrail:0000240:eb7c325d-6d02-4405-afb1-2f3397e7e29b", "row_index": 240, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb7c325d-6d02-4405-afb1-2f3397e7e29b", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3", "versionId": "v10"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00ee58f0-e65a-4a96-82fd-5fa547263704", "record_id": "flaws_cloudtrail:0000241:00ee58f0-e65a-4a96-82fd-5fa547263704", "row_index": 241, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00ee58f0-e65a-4a96-82fd-5fa547263704", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03bdbceb-5422-4b5f-be3c-47a390a0ba40", "record_id": "flaws_cloudtrail:0000242:03bdbceb-5422-4b5f-be3c-47a390a0ba40", "row_index": 242, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetLoginProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03bdbceb-5422-4b5f-be3c-47a390a0ba40", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetLoginProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Login Profile for User backup cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4689bcc9-a517-48e3-99d9-e3deef7b9838", "record_id": "flaws_cloudtrail:0000243:4689bcc9-a517-48e3-99d9-e3deef7b9838", "row_index": 243, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4689bcc9-a517-48e3-99d9-e3deef7b9838", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForSupport"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74abea4e-2afa-431b-8b0a-25a5ec48814b", "record_id": "flaws_cloudtrail:0000244:74abea4e-2afa-431b-8b0a-25a5ec48814b", "row_index": 244, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74abea4e-2afa-431b-8b0a-25a5ec48814b", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d25cff2-61a2-4747-9ad5-6eba347135", "record_id": "flaws_cloudtrail:0000245:3d25cff2-61a2-4747-9ad5-6eba347135", "row_index": 245, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d25cff2-61a2-4747-9ad5-6eba347135", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a43e35d-ed1e-43be-92f9-860b18ffd5b8", "record_id": "flaws_cloudtrail:0000246:4a43e35d-ed1e-43be-92f9-860b18ffd5b8", "row_index": 246, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a43e35d-ed1e-43be-92f9-860b18ffd5b8", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSConfigRole", "versionId": "v27"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bdca98e-9e70-474a-9f37-65dcea1565b6", "record_id": "flaws_cloudtrail:0000247:0bdca98e-9e70-474a-9f37-65dcea1565b6", "row_index": 247, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bdca98e-9e70-474a-9f37-65dcea1565b6", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkeyPerms", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e31f362f-fa83-4ca7-b1c7-1a0f992a88b6", "record_id": "flaws_cloudtrail:0000248:e31f362f-fa83-4ca7-b1c7-1a0f992a88b6", "row_index": 248, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e31f362f-fa83-4ca7-b1c7-1a0f992a88b6", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83832ff-8978-4358-bf7f-89704898c9d2", "record_id": "flaws_cloudtrail:0000249:83832ff-8978-4358-bf7f-89704898c9d2", "row_index": 249, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83832ff-8978-4358-bf7f-89704898c9d2", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/aws-service-role/AWSSupportServiceRolePolicy", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67332-d65b-4238-b720-5b39c529001", "record_id": "flaws_cloudtrail:0000250:67332-d65b-4238-b720-5b39c529001", "row_index": 250, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetLoginProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67332-d65b-4238-b720-5b39c529001", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetLoginProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Login Profile for User Level6 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "728b2f74-8d15-4012-8ab1-7a00fedf60f0", "record_id": "flaws_cloudtrail:0000251:728b2f74-8d15-4012-8ab1-7a00fedf60f0", "row_index": 251, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "728b2f74-8d15-4012-8ab1-7a00fedf60f0", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe64f9da-67ca-4e2c-adcf-df66703ee7fc", "record_id": "flaws_cloudtrail:0000252:fe64f9da-67ca-4e2c-adcf-df66703ee7fc", "row_index": 252, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe64f9da-67ca-4e2c-adcf-df66703ee7fc", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88e490243-06b6-419a-81e3-95fb111354aa", "record_id": "flaws_cloudtrail:0000253:88e490243-06b6-419a-81e3-95fb111354aa", "row_index": 253, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88e490243-06b6-419a-81e3-95fb111354aa", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForTrustedAdvisor"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3be3d2f5-414e-4d11-b85d-d687aaa888d2", "record_id": "flaws_cloudtrail:0000254:3be3d2f5-414e-4d11-b85d-d687aaa888d2", "row_index": 254, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3be3d2f5-414e-4d11-b85d-d687aaa888d2", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "250e13f0-77dc-4886-ba4d-6b4ced431cb1", "record_id": "flaws_cloudtrail:0000255:250e13f0-77dc-4886-ba4d-6b4ced431cb1", "row_index": 255, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "250e13f0-77dc-4886-ba4d-6b4ced431cb1", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForOrganizations"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b65d96a-5609-4a5d-9cc5-4ccfdbd945789", "record_id": "flaws_cloudtrail:0000256:0b65d96a-5609-4a5d-9cc5-4ccfdbd945789", "row_index": 256, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b65d96a-5609-4a5d-9cc5-4ccfdbd945789", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "371b1b24-0ecb-47f9-bb03-7ecf8e7a045e", "record_id": "flaws_cloudtrail:0000257:371b1b24-0ecb-47f9-bb03-7ecf8e7a045e", "row_index": 257, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "371b1b24-0ecb-47f9-bb03-7ecf8e7a045e", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffc85d9f-7ea2-4127-8e69-d069579c7d74", "record_id": "flaws_cloudtrail:0000258:ffc85d9f-7ea2-4127-8e69-d069579c7d74", "row_index": 258, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffc85d9f-7ea2-4127-8e69-d069579c7d74", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "092f7373-f688-4711-acfb-e81f524bbfe2", "record_id": "flaws_cloudtrail:0000259:092f7373-f688-4711-acfb-e81f524bbfe2", "row_index": 259, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "092f7373-f688-4711-acfb-e81f524bbfe2", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b9fb647-40f1-435a-b613-c7382c0b6c24", "record_id": "flaws_cloudtrail:0000260:5b9fb647-40f1-435a-b613-c7382c0b6c24", "row_index": 260, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b9fb647-40f1-435a-b613-c7382c0b6c24", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2799d919-831c-43da-a76c-805140c4c0c6", "record_id": "flaws_cloudtrail:0000261:2799d919-831c-43da-a76c-805140c4c0c6", "row_index": 261, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2799d919-831c-43da-a76c-805140c4c0c6", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d12440e-509f-468f-a158-8d742e06beaf", "record_id": "flaws_cloudtrail:0000262:6d12440e-509f-468f-a158-8d742e06beaf", "row_index": 262, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d12440e-509f-468f-a158-8d742e06beaf", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4fe8fe0-9322-4f04-97e9-2c5fedd02d8f", "record_id": "flaws_cloudtrail:0000263:d4fe8fe0-9322-4f04-97e9-2c5fedd02d8f", "row_index": 263, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4fe8fe0-9322-4f04-97e9-2c5fedd02d8f", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b700ad5-d7fb-45ed-83e4-02a50ac0b2d1", "record_id": "flaws_cloudtrail:0000264:7b700ad5-d7fb-45ed-83e4-02a50ac0b2d1", "row_index": 264, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b700ad5-d7fb-45ed-83e4-02a50ac0b2d1", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02597-3aed-4bc1-8237-5c32d71566a5", "record_id": "flaws_cloudtrail:0000265:02597-3aed-4bc1-8237-5c32d71566a5", "row_index": 265, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02597-3aed-4bc1-8237-5c32d71566a5", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a2b86c7-b570-45e1-a08e-baa262f7f857", "record_id": "flaws_cloudtrail:0000266:8a2b86c7-b570-45e1-a08e-baa262f7f857", "row_index": 266, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a2b86c7-b570-45e1-a08e-baa262f7f857", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/aws-service-role/AWSOrganizationsServiceTrustPolicy", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aa6fcd8-d614-459d-81e0-80691d0d9de9", "record_id": "flaws_cloudtrail:0000267:5aa6fcd8-d614-459d-81e0-80691d0d9de9", "row_index": 267, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aa6fcd8-d614-459d-81e0-80691d0d9de9", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForSupport"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93e78b31-8494-4f37-a048-54af927483af", "record_id": "flaws_cloudtrail:0000268:93e78b31-8494-4f37-a048-54af927483af", "row_index": 268, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93e78b31-8494-4f37-a048-54af927483af", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19a798bc-b1cb-477b-abe7-3cc804e61cd1", "record_id": "flaws_cloudtrail:0000269:19a798bc-b1cb-477b-abe7-3cc804e61cd1", "row_index": 269, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19a798bc-b1cb-477b-abe7-3cc804e61cd1", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e11737-378e-4e59-a929-ec4ec4f4311c", "record_id": "flaws_cloudtrail:0000270:e11737-378e-4e59-a929-ec4ec4f4311c", "row_index": 270, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e11737-378e-4e59-a929-ec4ec4f4311c", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e64b40b7-561b-4963-90ee-c9e772f72d44", "record_id": "flaws_cloudtrail:0000271:e64b40b7-561b-4963-90ee-c9e772f72d44", "row_index": 271, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e64b40b7-561b-4963-90ee-c9e772f72d44", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForOrganizations"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca1857c1-1435-460e-b925-63630d7d", "record_id": "flaws_cloudtrail:0000272:ca1857c1-1435-460e-b925-63630d7d", "row_index": 272, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca1857c1-1435-460e-b925-63630d7d", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/config-role-us-west-2_AWSConfigDeliveryPermissions_us-west-2", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc3cc7d5-ca04-42d9-bf17-3efa3086a3ca", "record_id": "flaws_cloudtrail:0000273:bc3cc7d5-ca04-42d9-bf17-3efa3086a3ca", "row_index": 273, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc3cc7d5-ca04-42d9-bf17-3efa3086a3ca", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/job-function/ViewOnlyAccess", "versionId": "v7"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e6f1840-fcf7-4b22-98b6-d265bb719a17", "record_id": "flaws_cloudtrail:0000274:2e6f1840-fcf7-4b22-98b6-d265bb719a17", "row_index": 274, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e6f1840-fcf7-4b22-98b6-d265bb719a17", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cf102d5-15cd-4dcb-b129-267b2d5d04db", "record_id": "flaws_cloudtrail:0000275:3cf102d5-15cd-4dcb-b129-267b2d5d04db", "row_index": 275, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cf102d5-15cd-4dcb-b129-267b2d5d04db", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonAthenaFullAccess", "versionId": "v5"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86212-7de4-4de7-9f7c-705f6738c19f", "record_id": "flaws_cloudtrail:0000276:86212-7de4-4de7-9f7c-705f6738c19f", "row_index": 276, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86212-7de4-4de7-9f7c-705f6738c19f", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb7c325d-6d02-4405-afb1-2f3397e7e29b", "record_id": "flaws_cloudtrail:0000277:eb7c325d-6d02-4405-afb1-2f3397e7e29b", "row_index": 277, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb7c325d-6d02-4405-afb1-2f3397e7e29b", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3", "versionId": "v10"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00ee58f0-e65a-4a96-82fd-5fa547263704", "record_id": "flaws_cloudtrail:0000278:00ee58f0-e65a-4a96-82fd-5fa547263704", "row_index": 278, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00ee58f0-e65a-4a96-82fd-5fa547263704", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForCloudTrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03bdbceb-5422-4b5f-be3c-47a390a0ba40", "record_id": "flaws_cloudtrail:0000279:03bdbceb-5422-4b5f-be3c-47a390a0ba40", "row_index": 279, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetLoginProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03bdbceb-5422-4b5f-be3c-47a390a0ba40", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetLoginProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Login Profile for User backup cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4689bcc9-a517-48e3-99d9-e3deef7b9838", "record_id": "flaws_cloudtrail:0000280:4689bcc9-a517-48e3-99d9-e3deef7b9838", "row_index": 280, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4689bcc9-a517-48e3-99d9-e3deef7b9838", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForSupport"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74abea4e-2afa-431b-8b0a-25a5ec48814b", "record_id": "flaws_cloudtrail:0000281:74abea4e-2afa-431b-8b0a-25a5ec48814b", "row_index": 281, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74abea4e-2afa-431b-8b0a-25a5ec48814b", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d25cff2-61a2-4747-9ad5-6eba347135", "record_id": "flaws_cloudtrail:0000282:3d25cff2-61a2-4747-9ad5-6eba347135", "row_index": 282, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d25cff2-61a2-4747-9ad5-6eba347135", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a43e35d-ed1e-43be-92f9-860b18ffd5b8", "record_id": "flaws_cloudtrail:0000283:4a43e35d-ed1e-43be-92f9-860b18ffd5b8", "row_index": 283, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a43e35d-ed1e-43be-92f9-860b18ffd5b8", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSConfigRole", "versionId": "v27"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bdca98e-9e70-474a-9f37-65dcea1565b6", "record_id": "flaws_cloudtrail:0000284:0bdca98e-9e70-474a-9f37-65dcea1565b6", "row_index": 284, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bdca98e-9e70-474a-9f37-65dcea1565b6", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkeyPerms", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e31f362f-fa83-4ca7-b1c7-1a0f992a88b6", "record_id": "flaws_cloudtrail:0000285:e31f362f-fa83-4ca7-b1c7-1a0f992a88b6", "row_index": 285, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e31f362f-fa83-4ca7-b1c7-1a0f992a88b6", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83832ff-8978-4358-bf7f-89704898c9d2", "record_id": "flaws_cloudtrail:0000286:83832ff-8978-4358-bf7f-89704898c9d2", "row_index": 286, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83832ff-8978-4358-bf7f-89704898c9d2", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/aws-service-role/AWSSupportServiceRolePolicy", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67332-d65b-4238-b720-5b39c529001", "record_id": "flaws_cloudtrail:0000287:67332-d65b-4238-b720-5b39c529001", "row_index": 287, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetLoginProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67332-d65b-4238-b720-5b39c529001", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetLoginProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Login Profile for User Level6 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "728b2f74-8d15-4012-8ab1-7a00fedf60f0", "record_id": "flaws_cloudtrail:0000288:728b2f74-8d15-4012-8ab1-7a00fedf60f0", "row_index": 288, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "728b2f74-8d15-4012-8ab1-7a00fedf60f0", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe64f9da-67ca-4e2c-adcf-df66703ee7fc", "record_id": "flaws_cloudtrail:0000289:fe64f9da-67ca-4e2c-adcf-df66703ee7fc", "row_index": 289, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe64f9da-67ca-4e2c-adcf-df66703ee7fc", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88e490243-06b6-419a-81e3-95fb111354aa", "record_id": "flaws_cloudtrail:0000290:88e490243-06b6-419a-81e3-95fb111354aa", "row_index": 290, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88e490243-06b6-419a-81e3-95fb111354aa", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForTrustedAdvisor"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3be3d2f5-414e-4d11-b85d-d687aaa888d2", "record_id": "flaws_cloudtrail:0000291:3be3d2f5-414e-4d11-b85d-d687aaa888d2", "row_index": 291, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3be3d2f5-414e-4d11-b85d-d687aaa888d2", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "250e13f0-77dc-4886-ba4d-6b4ced431cb1", "record_id": "flaws_cloudtrail:0000292:250e13f0-77dc-4886-ba4d-6b4ced431cb1", "row_index": 292, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "250e13f0-77dc-4886-ba4d-6b4ced431cb1", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForOrganizations"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b65d96a-5609-4a5d-9cc5-4ccfdbd945789", "record_id": "flaws_cloudtrail:0000293:0b65d96a-5609-4a5d-9cc5-4ccfdbd945789", "row_index": 293, "timestamp": "2019-07-08T15:43:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b65d96a-5609-4a5d-9cc5-4ccfdbd945789", "eventTime": "2019-07-08T15:43:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "371b1b24-0ecb-47f9-bb03-7ecf8e7a045e", "record_id": "flaws_cloudtrail:0000294:371b1b24-0ecb-47f9-bb03-7ecf8e7a045e", "row_index": 294, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "371b1b24-0ecb-47f9-bb03-7ecf8e7a045e", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffc85d9f-7ea2-4127-8e69-d069579c7d74", "record_id": "flaws_cloudtrail:0000295:ffc85d9f-7ea2-4127-8e69-d069579c7d74", "row_index": 295, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffc85d9f-7ea2-4127-8e69-d069579c7d74", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "092f7373-f688-4711-acfb-e81f524bbfe2", "record_id": "flaws_cloudtrail:0000296:092f7373-f688-4711-acfb-e81f524bbfe2", "row_index": 296, "timestamp": "2019-07-08T15:43:38Z", "event_type": "ListStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "092f7373-f688-4711-acfb-e81f524bbfe2", "eventTime": "2019-07-08T15:43:38Z", "eventName": "ListStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85faf307-ccfb-4e5f-b187-d526e845e821", "record_id": "flaws_cloudtrail:0000297:85faf307-ccfb-4e5f-b187-d526e845e821", "row_index": 297, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85faf307-ccfb-4e5f-b187-d526e845e821", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9e86aab-e51b-47c2-83c0-d4c20db607562", "record_id": "flaws_cloudtrail:0000298:c9e86aab-e51b-47c2-83c0-d4c20db607562", "row_index": 298, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9e86aab-e51b-47c2-83c0-d4c20db607562", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bceac37-7d8e-45ae-ad20-a8b8b2c21a87", "record_id": "flaws_cloudtrail:0000299:5bceac37-7d8e-45ae-ad20-a8b8b2c21a87", "row_index": 299, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bceac37-7d8e-45ae-ad20-a8b8b2c21a87", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SummitRouteAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a38a9bb-0a83-4ec0-84ef-8dbad7f144ae", "record_id": "flaws_cloudtrail:0000300:0a38a9bb-0a83-4ec0-84ef-8dbad7f144ae", "row_index": 300, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a38a9bb-0a83-4ec0-84ef-8dbad7f144ae", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e2d6971-c76a-46e8-b3ab-0fc4f063f608", "record_id": "flaws_cloudtrail:0000301:3e2d6971-c76a-46e8-b3ab-0fc4f063f608", "row_index": 301, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e2d6971-c76a-46e8-b3ab-0fc4f063f608", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b22604e-402f-4059-ac80-01e1c4c74cec", "record_id": "flaws_cloudtrail:0000302:4b22604e-402f-4059-ac80-01e1c4c74cec", "row_index": 302, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b22604e-402f-4059-ac80-01e1c4c74cec", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3da508a1-64f9-44c5-9244-525818b7e8", "record_id": "flaws_cloudtrail:0000303:3da508a1-64f9-44c5-9244-525818b7e8", "row_index": 303, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3da508a1-64f9-44c5-9244-525818b7e8", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/aws-service-role/CloudTrailServiceRolePolicy", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e936109-cad5-4797-8754-9826b49d5b5c", "record_id": "flaws_cloudtrail:0000304:e936109-cad5-4797-8754-9826b49d5b5c", "row_index": 304, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e936109-cad5-4797-8754-9826b49d5b5c", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb605373d-3ddb-4b2e-abc0-95a920e13c24", "record_id": "flaws_cloudtrail:0000305:cb605373d-3ddb-4b2e-abc0-95a920e13c24", "row_index": 305, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb605373d-3ddb-4b2e-abc0-95a920e13c24", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "config-role-us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0ce5894-ff4f-4005-8e33-ada07939ddaf", "record_id": "flaws_cloudtrail:0000306:f0ce5894-ff4f-4005-8e33-ada07939ddaf", "row_index": 306, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0ce5894-ff4f-4005-8e33-ada07939ddaf", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/aws-service-role/AWSTrustedAdvisorServiceRolePolicy", "versionId": "v6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74b010577-4f76-40c7-8d1f-16e0c8c1947a", "record_id": "flaws_cloudtrail:0000307:74b010577-4f76-40c7-8d1f-16e0c8c1947a", "row_index": 307, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74b010577-4f76-40c7-8d1f-16e0c8c1947a", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v28"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "585e7f71-42c7-4c6d-b47a-13e1a78a6125", "record_id": "flaws_cloudtrail:0000308:585e7f71-42c7-4c6d-b47a-13e1a78a6125", "row_index": 308, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "585e7f71-42c7-4c6d-b47a-13e1a78a6125", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "config-role-us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54a79c01-8298-44c5-81b8-39535b87b8b6", "record_id": "flaws_cloudtrail:0000309:54a79c01-8298-44c5-81b8-39535b87b8b6", "row_index": 309, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54a79c01-8298-44c5-81b8-39535b87b8b6", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a61e29f3-26b0-4a82-87f7-ec4a496cfc1b", "record_id": "flaws_cloudtrail:0000310:a61e29f3-26b0-4a82-87f7-ec4a496cfc1b", "row_index": 310, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a61e29f3-26b0-4a82-87f7-ec4a496cfc1b", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7aba674d-824c-4a82-8592-ffe46c652e21", "record_id": "flaws_cloudtrail:0000311:7aba674d-824c-4a82-8592-ffe46c652e21", "row_index": 311, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7aba674d-824c-4a82-8592-ffe46c652e21", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForTrustedAdvisor"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5f36e3b-2426-4908-a1f5-bd7531f6a70f", "record_id": "flaws_cloudtrail:0000312:f5f36e3b-2426-4908-a1f5-bd7531f6a70f", "row_index": 312, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5f36e3b-2426-4908-a1f5-bd7531f6a70f", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "331825fcd-d06c-4083-a760-d539502ef", "record_id": "flaws_cloudtrail:0000313:331825fcd-d06c-4083-a760-d539502ef", "row_index": 313, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "331825fcd-d06c-4083-a760-d539502ef", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f879487d-cb86-4f8c-bc37-cf0f1aee9826", "record_id": "flaws_cloudtrail:0000314:3f879487d-cb86-4f8c-bc37-cf0f1aee9826", "row_index": 314, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f879487d-cb86-4f8c-bc37-cf0f1aee9826", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "391b8369-42d6-4c71-98f4-921c392024ee5", "record_id": "flaws_cloudtrail:0000315:391b8369-42d6-4c71-98f4-921c392024ee5", "row_index": 315, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "391b8369-42d6-4c71-98f4-921c392024ee5", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f97e7c5b-f66c-4bf8-a40a-df546ace704d", "record_id": "flaws_cloudtrail:0000316:f97e7c5b-f66c-4bf8-a40a-df546ace704d", "row_index": 316, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 925, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f97e7c5b-f66c-4bf8-a40a-df546ace704d", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "202eeaef-c64f-416d-96a7-32b84261c25a", "record_id": "flaws_cloudtrail:0000317:202eeaef-c64f-416d-96a7-32b84261c25a", "row_index": 317, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "202eeaef-c64f-416d-96a7-32b84261c25a", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SummitRouteAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dad4554-558b-455e-b99a-6f3abf3cd760", "record_id": "flaws_cloudtrail:0000318:7dad4554-558b-455e-b99a-6f3abf3cd760", "row_index": 318, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dad4554-558b-455e-b99a-6f3abf3cd760", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef0f4ca7-f730-48dc-8bb2-9ec48b0c712b", "record_id": "flaws_cloudtrail:0000319:ef0f4ca7-f730-48dc-8bb2-9ec48b0c712b", "row_index": 319, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef0f4ca7-f730-48dc-8bb2-9ec48b0c712b", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf9889d6-163b-4189-a2b1-1c169d7407ab", "record_id": "flaws_cloudtrail:0000320:cf9889d6-163b-4189-a2b1-1c169d7407ab", "row_index": 320, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf9889d6-163b-4189-a2b1-1c169d7407ab", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85faf307-ccfb-4e5f-b187-d526e845e821", "record_id": "flaws_cloudtrail:0000321:85faf307-ccfb-4e5f-b187-d526e845e821", "row_index": 321, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85faf307-ccfb-4e5f-b187-d526e845e821", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9e86aab-e51b-47c2-83c0-d4c20db607562", "record_id": "flaws_cloudtrail:0000322:c9e86aab-e51b-47c2-83c0-d4c20db607562", "row_index": 322, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9e86aab-e51b-47c2-83c0-d4c20db607562", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bceac37-7d8e-45ae-ad20-a8b8b2c21a87", "record_id": "flaws_cloudtrail:0000323:5bceac37-7d8e-45ae-ad20-a8b8b2c21a87", "row_index": 323, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bceac37-7d8e-45ae-ad20-a8b8b2c21a87", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SummitRouteAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a38a9bb-0a83-4ec0-84ef-8dbad7f144ae", "record_id": "flaws_cloudtrail:0000324:0a38a9bb-0a83-4ec0-84ef-8dbad7f144ae", "row_index": 324, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a38a9bb-0a83-4ec0-84ef-8dbad7f144ae", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e2d6971-c76a-46e8-b3ab-0fc4f063f608", "record_id": "flaws_cloudtrail:0000325:3e2d6971-c76a-46e8-b3ab-0fc4f063f608", "row_index": 325, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 942, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e2d6971-c76a-46e8-b3ab-0fc4f063f608", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b22604e-402f-4059-ac80-01e1c4c74cec", "record_id": "flaws_cloudtrail:0000326:4b22604e-402f-4059-ac80-01e1c4c74cec", "row_index": 326, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b22604e-402f-4059-ac80-01e1c4c74cec", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3da508a1-64f9-44c5-9244-525818b7e8", "record_id": "flaws_cloudtrail:0000327:3da508a1-64f9-44c5-9244-525818b7e8", "row_index": 327, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3da508a1-64f9-44c5-9244-525818b7e8", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/aws-service-role/CloudTrailServiceRolePolicy", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e936109-cad5-4797-8754-9826b49d5b5c", "record_id": "flaws_cloudtrail:0000328:e936109-cad5-4797-8754-9826b49d5b5c", "row_index": 328, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e936109-cad5-4797-8754-9826b49d5b5c", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb605373d-3ddb-4b2e-abc0-95a920e13c24", "record_id": "flaws_cloudtrail:0000329:cb605373d-3ddb-4b2e-abc0-95a920e13c24", "row_index": 329, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb605373d-3ddb-4b2e-abc0-95a920e13c24", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "config-role-us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0ce5894-ff4f-4005-8e33-ada07939ddaf", "record_id": "flaws_cloudtrail:0000330:f0ce5894-ff4f-4005-8e33-ada07939ddaf", "row_index": 330, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0ce5894-ff4f-4005-8e33-ada07939ddaf", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/aws-service-role/AWSTrustedAdvisorServiceRolePolicy", "versionId": "v6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74b010577-4f76-40c7-8d1f-16e0c8c1947a", "record_id": "flaws_cloudtrail:0000331:74b010577-4f76-40c7-8d1f-16e0c8c1947a", "row_index": 331, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74b010577-4f76-40c7-8d1f-16e0c8c1947a", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v28"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "585e7f71-42c7-4c6d-b47a-13e1a78a6125", "record_id": "flaws_cloudtrail:0000332:585e7f71-42c7-4c6d-b47a-13e1a78a6125", "row_index": 332, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "585e7f71-42c7-4c6d-b47a-13e1a78a6125", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "config-role-us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54a79c01-8298-44c5-81b8-39535b87b8b6", "record_id": "flaws_cloudtrail:0000333:54a79c01-8298-44c5-81b8-39535b87b8b6", "row_index": 333, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54a79c01-8298-44c5-81b8-39535b87b8b6", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a61e29f3-26b0-4a82-87f7-ec4a496cfc1b", "record_id": "flaws_cloudtrail:0000334:a61e29f3-26b0-4a82-87f7-ec4a496cfc1b", "row_index": 334, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a61e29f3-26b0-4a82-87f7-ec4a496cfc1b", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7aba674d-824c-4a82-8592-ffe46c652e21", "record_id": "flaws_cloudtrail:0000335:7aba674d-824c-4a82-8592-ffe46c652e21", "row_index": 335, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7aba674d-824c-4a82-8592-ffe46c652e21", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForTrustedAdvisor"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5f36e3b-2426-4908-a1f5-bd7531f6a70f", "record_id": "flaws_cloudtrail:0000336:f5f36e3b-2426-4908-a1f5-bd7531f6a70f", "row_index": 336, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5f36e3b-2426-4908-a1f5-bd7531f6a70f", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "331825fcd-d06c-4083-a760-d539502ef", "record_id": "flaws_cloudtrail:0000337:331825fcd-d06c-4083-a760-d539502ef", "row_index": 337, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "331825fcd-d06c-4083-a760-d539502ef", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f879487d-cb86-4f8c-bc37-cf0f1aee9826", "record_id": "flaws_cloudtrail:0000338:3f879487d-cb86-4f8c-bc37-cf0f1aee9826", "row_index": 338, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f879487d-cb86-4f8c-bc37-cf0f1aee9826", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "391b8369-42d6-4c71-98f4-921c392024ee5", "record_id": "flaws_cloudtrail:0000339:391b8369-42d6-4c71-98f4-921c392024ee5", "row_index": 339, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "391b8369-42d6-4c71-98f4-921c392024ee5", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f97e7c5b-f66c-4bf8-a40a-df546ace704d", "record_id": "flaws_cloudtrail:0000340:f97e7c5b-f66c-4bf8-a40a-df546ace704d", "row_index": 340, "timestamp": "2019-07-08T15:43:39Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 925, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f97e7c5b-f66c-4bf8-a40a-df546ace704d", "eventTime": "2019-07-08T15:43:39Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "[Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "202eeaef-c64f-416d-96a7-32b84261c25a", "record_id": "flaws_cloudtrail:0000341:202eeaef-c64f-416d-96a7-32b84261c25a", "row_index": 341, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "202eeaef-c64f-416d-96a7-32b84261c25a", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SummitRouteAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dad4554-558b-455e-b99a-6f3abf3cd760", "record_id": "flaws_cloudtrail:0000342:7dad4554-558b-455e-b99a-6f3abf3cd760", "row_index": 342, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dad4554-558b-455e-b99a-6f3abf3cd760", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef0f4ca7-f730-48dc-8bb2-9ec48b0c712b", "record_id": "flaws_cloudtrail:0000343:ef0f4ca7-f730-48dc-8bb2-9ec48b0c712b", "row_index": 343, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef0f4ca7-f730-48dc-8bb2-9ec48b0c712b", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf9889d6-163b-4189-a2b1-1c169d7407ab", "record_id": "flaws_cloudtrail:0000344:cf9889d6-163b-4189-a2b1-1c169d7407ab", "row_index": 344, "timestamp": "2019-07-08T15:43:39Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf9889d6-163b-4189-a2b1-1c169d7407ab", "eventTime": "2019-07-08T15:43:39Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "234ba461-a57c-4753-af00-fadcd0f52c15", "record_id": "flaws_cloudtrail:0000345:234ba461-a57c-4753-af00-fadcd0f52c15", "row_index": 345, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "234ba461-a57c-4753-af00-fadcd0f52c15", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52e6e500-0509-4e87-b603-c7e39e149dd2", "record_id": "flaws_cloudtrail:0000346:52e6e500-0509-4e87-b603-c7e39e149dd2", "row_index": 346, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52e6e500-0509-4e87-b603-c7e39e149dd2", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32da561f-a495-4dcc-bd48-fa822c3bf422", "record_id": "flaws_cloudtrail:0000347:32da561f-a495-4dcc-bd48-fa822c3bf422", "row_index": 347, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32da561f-a495-4dcc-bd48-fa822c3bf422", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08b781115-f4ff-41e0-80db-7bb20d5cd4f1", "record_id": "flaws_cloudtrail:0000348:08b781115-f4ff-41e0-80db-7bb20d5cd4f1", "row_index": 348, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08b781115-f4ff-41e0-80db-7bb20d5cd4f1", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0674a3b-7f23-4808-9601-cfc1a01c5a25", "record_id": "flaws_cloudtrail:0000349:f0674a3b-7f23-4808-9601-cfc1a01c5a25", "row_index": 349, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0674a3b-7f23-4808-9601-cfc1a01c5a25", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e30112f-9f96-4771-a459-00137ce83b0", "record_id": "flaws_cloudtrail:0000350:2e30112f-9f96-4771-a459-00137ce83b0", "row_index": 350, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e30112f-9f96-4771-a459-00137ce83b0", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d756664a-674a-4c18-a052-8b338bc5bf16", "record_id": "flaws_cloudtrail:0000351:8d756664a-674a-4c18-a052-8b338bc5bf16", "row_index": 351, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d756664a-674a-4c18-a052-8b338bc5bf16", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73543c-bf1e-4d33-a592-608a6dd72da5", "record_id": "flaws_cloudtrail:0000352:73543c-bf1e-4d33-a592-608a6dd72da5", "row_index": 352, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73543c-bf1e-4d33-a592-608a6dd72da5", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23e905843-2e59-4cf7-9cf4-29f0857c6c65", "record_id": "flaws_cloudtrail:0000353:23e905843-2e59-4cf7-9cf4-29f0857c6c65", "row_index": 353, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23e905843-2e59-4cf7-9cf4-29f0857c6c65", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "515077b5-efd1-4d6c-9184-1c7a550782cc4", "record_id": "flaws_cloudtrail:0000354:515077b5-efd1-4d6c-9184-1c7a550782cc4", "row_index": 354, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "515077b5-efd1-4d6c-9184-1c7a550782cc4", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d72a3cbf-6fb8-4b4f-ad86-d43258eb3fb", "record_id": "flaws_cloudtrail:0000355:d72a3cbf-6fb8-4b4f-ad86-d43258eb3fb", "row_index": 355, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d72a3cbf-6fb8-4b4f-ad86-d43258eb3fb", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "234ba461-a57c-4753-af00-fadcd0f52c15", "record_id": "flaws_cloudtrail:0000356:234ba461-a57c-4753-af00-fadcd0f52c15", "row_index": 356, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "234ba461-a57c-4753-af00-fadcd0f52c15", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52e6e500-0509-4e87-b603-c7e39e149dd2", "record_id": "flaws_cloudtrail:0000357:52e6e500-0509-4e87-b603-c7e39e149dd2", "row_index": 357, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52e6e500-0509-4e87-b603-c7e39e149dd2", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32da561f-a495-4dcc-bd48-fa822c3bf422", "record_id": "flaws_cloudtrail:0000358:32da561f-a495-4dcc-bd48-fa822c3bf422", "row_index": 358, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32da561f-a495-4dcc-bd48-fa822c3bf422", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08b781115-f4ff-41e0-80db-7bb20d5cd4f1", "record_id": "flaws_cloudtrail:0000359:08b781115-f4ff-41e0-80db-7bb20d5cd4f1", "row_index": 359, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08b781115-f4ff-41e0-80db-7bb20d5cd4f1", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0674a3b-7f23-4808-9601-cfc1a01c5a25", "record_id": "flaws_cloudtrail:0000360:f0674a3b-7f23-4808-9601-cfc1a01c5a25", "row_index": 360, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0674a3b-7f23-4808-9601-cfc1a01c5a25", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e30112f-9f96-4771-a459-00137ce83b0", "record_id": "flaws_cloudtrail:0000361:2e30112f-9f96-4771-a459-00137ce83b0", "row_index": 361, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e30112f-9f96-4771-a459-00137ce83b0", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d756664a-674a-4c18-a052-8b338bc5bf16", "record_id": "flaws_cloudtrail:0000362:8d756664a-674a-4c18-a052-8b338bc5bf16", "row_index": 362, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d756664a-674a-4c18-a052-8b338bc5bf16", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73543c-bf1e-4d33-a592-608a6dd72da5", "record_id": "flaws_cloudtrail:0000363:73543c-bf1e-4d33-a592-608a6dd72da5", "row_index": 363, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73543c-bf1e-4d33-a592-608a6dd72da5", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23e905843-2e59-4cf7-9cf4-29f0857c6c65", "record_id": "flaws_cloudtrail:0000364:23e905843-2e59-4cf7-9cf4-29f0857c6c65", "row_index": 364, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23e905843-2e59-4cf7-9cf4-29f0857c6c65", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "515077b5-efd1-4d6c-9184-1c7a550782cc4", "record_id": "flaws_cloudtrail:0000365:515077b5-efd1-4d6c-9184-1c7a550782cc4", "row_index": 365, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "515077b5-efd1-4d6c-9184-1c7a550782cc4", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d72a3cbf-6fb8-4b4f-ad86-d43258eb3fb", "record_id": "flaws_cloudtrail:0000366:d72a3cbf-6fb8-4b4f-ad86-d43258eb3fb", "row_index": 366, "timestamp": "2019-07-08T15:43:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d72a3cbf-6fb8-4b4f-ad86-d43258eb3fb", "eventTime": "2019-07-08T15:43:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfc06b15-c4d5-47d1-897d-1c1d6e38484a", "record_id": "flaws_cloudtrail:0000367:dfc06b15-c4d5-47d1-897d-1c1d6e38484a", "row_index": 367, "timestamp": "2019-07-08T15:43:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfc06b15-c4d5-47d1-897d-1c1d6e38484a", "eventTime": "2019-07-08T15:43:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "937040cc-3189-437a-ad48-06dc28ece407", "record_id": "flaws_cloudtrail:0000368:937040cc-3189-437a-ad48-06dc28ece407", "row_index": 368, "timestamp": "2019-07-08T15:43:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "937040cc-3189-437a-ad48-06dc28ece407", "eventTime": "2019-07-08T15:43:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e604ea2b-39cf-4fd0-8898-6e6611fcf6db", "record_id": "flaws_cloudtrail:0000369:e604ea2b-39cf-4fd0-8898-6e6611fcf6db", "row_index": 369, "timestamp": "2019-07-08T15:43:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e604ea2b-39cf-4fd0-8898-6e6611fcf6db", "eventTime": "2019-07-08T15:43:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b127325f-1db1-4696-aca5-736dfb55518", "record_id": "flaws_cloudtrail:0000370:b127325f-1db1-4696-aca5-736dfb55518", "row_index": 370, "timestamp": "2019-07-08T15:43:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b127325f-1db1-4696-aca5-736dfb55518", "eventTime": "2019-07-08T15:43:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8633c831-580c-48b4-813c-d88c854931a9", "record_id": "flaws_cloudtrail:0000371:8633c831-580c-48b4-813c-d88c854931a9", "row_index": 371, "timestamp": "2019-07-08T15:43:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8633c831-580c-48b4-813c-d88c854931a9", "eventTime": "2019-07-08T15:43:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a633f05-fdf0-40b3-9b75-ea64b1e94d6e", "record_id": "flaws_cloudtrail:0000372:5a633f05-fdf0-40b3-9b75-ea64b1e94d6e", "row_index": 372, "timestamp": "2019-07-08T15:43:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a633f05-fdf0-40b3-9b75-ea64b1e94d6e", "eventTime": "2019-07-08T15:43:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95a91130-ea51-4b91-9249-9eda38993b7", "record_id": "flaws_cloudtrail:0000373:95a91130-ea51-4b91-9249-9eda38993b7", "row_index": 373, "timestamp": "2019-07-08T15:43:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95a91130-ea51-4b91-9249-9eda38993b7", "eventTime": "2019-07-08T15:43:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a191872-7e73-4875-b773-2696b7856a46", "record_id": "flaws_cloudtrail:0000374:a191872-7e73-4875-b773-2696b7856a46", "row_index": 374, "timestamp": "2019-07-08T15:43:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a191872-7e73-4875-b773-2696b7856a46", "eventTime": "2019-07-08T15:43:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e3a2357-d257-4d77-9b53-0fde0a84081", "record_id": "flaws_cloudtrail:0000375:5e3a2357-d257-4d77-9b53-0fde0a84081", "row_index": 375, "timestamp": "2019-07-08T15:43:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e3a2357-d257-4d77-9b53-0fde0a84081", "eventTime": "2019-07-08T15:43:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "964e5c84-9577-407a-85eb-95d7743bfed4", "record_id": "flaws_cloudtrail:0000376:964e5c84-9577-407a-85eb-95d7743bfed4", "row_index": 376, "timestamp": "2019-07-08T15:43:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "964e5c84-9577-407a-85eb-95d7743bfed4", "eventTime": "2019-07-08T15:43:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e9abba9-2547-4fde-998c-7755a2ee80e7", "record_id": "flaws_cloudtrail:0000377:8e9abba9-2547-4fde-998c-7755a2ee80e7", "row_index": 377, "timestamp": "2019-07-08T15:43:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e9abba9-2547-4fde-998c-7755a2ee80e7", "eventTime": "2019-07-08T15:43:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "712808-1287-4f20-ac90-0f1fc20d5d51", "record_id": "flaws_cloudtrail:0000378:712808-1287-4f20-ac90-0f1fc20d5d51", "row_index": 378, "timestamp": "2019-07-08T15:43:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "712808-1287-4f20-ac90-0f1fc20d5d51", "eventTime": "2019-07-08T15:43:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa1501d2-c048-401f-a0dd-b9215ec59a70", "record_id": "flaws_cloudtrail:0000379:aa1501d2-c048-401f-a0dd-b9215ec59a70", "row_index": 379, "timestamp": "2019-07-08T15:43:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa1501d2-c048-401f-a0dd-b9215ec59a70", "eventTime": "2019-07-08T15:43:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d94573-f531-4075-90f2-af5554ada003", "record_id": "flaws_cloudtrail:0000380:3d94573-f531-4075-90f2-af5554ada003", "row_index": 380, "timestamp": "2019-07-08T15:43:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d94573-f531-4075-90f2-af5554ada003", "eventTime": "2019-07-08T15:43:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfc06b15-c4d5-47d1-897d-1c1d6e38484a", "record_id": "flaws_cloudtrail:0000381:dfc06b15-c4d5-47d1-897d-1c1d6e38484a", "row_index": 381, "timestamp": "2019-07-08T15:43:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfc06b15-c4d5-47d1-897d-1c1d6e38484a", "eventTime": "2019-07-08T15:43:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "937040cc-3189-437a-ad48-06dc28ece407", "record_id": "flaws_cloudtrail:0000382:937040cc-3189-437a-ad48-06dc28ece407", "row_index": 382, "timestamp": "2019-07-08T15:43:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "937040cc-3189-437a-ad48-06dc28ece407", "eventTime": "2019-07-08T15:43:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e604ea2b-39cf-4fd0-8898-6e6611fcf6db", "record_id": "flaws_cloudtrail:0000383:e604ea2b-39cf-4fd0-8898-6e6611fcf6db", "row_index": 383, "timestamp": "2019-07-08T15:43:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e604ea2b-39cf-4fd0-8898-6e6611fcf6db", "eventTime": "2019-07-08T15:43:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b127325f-1db1-4696-aca5-736dfb55518", "record_id": "flaws_cloudtrail:0000384:b127325f-1db1-4696-aca5-736dfb55518", "row_index": 384, "timestamp": "2019-07-08T15:43:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b127325f-1db1-4696-aca5-736dfb55518", "eventTime": "2019-07-08T15:43:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8633c831-580c-48b4-813c-d88c854931a9", "record_id": "flaws_cloudtrail:0000385:8633c831-580c-48b4-813c-d88c854931a9", "row_index": 385, "timestamp": "2019-07-08T15:43:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8633c831-580c-48b4-813c-d88c854931a9", "eventTime": "2019-07-08T15:43:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a633f05-fdf0-40b3-9b75-ea64b1e94d6e", "record_id": "flaws_cloudtrail:0000386:5a633f05-fdf0-40b3-9b75-ea64b1e94d6e", "row_index": 386, "timestamp": "2019-07-08T15:43:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a633f05-fdf0-40b3-9b75-ea64b1e94d6e", "eventTime": "2019-07-08T15:43:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95a91130-ea51-4b91-9249-9eda38993b7", "record_id": "flaws_cloudtrail:0000387:95a91130-ea51-4b91-9249-9eda38993b7", "row_index": 387, "timestamp": "2019-07-08T15:43:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95a91130-ea51-4b91-9249-9eda38993b7", "eventTime": "2019-07-08T15:43:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a191872-7e73-4875-b773-2696b7856a46", "record_id": "flaws_cloudtrail:0000388:a191872-7e73-4875-b773-2696b7856a46", "row_index": 388, "timestamp": "2019-07-08T15:43:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a191872-7e73-4875-b773-2696b7856a46", "eventTime": "2019-07-08T15:43:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e3a2357-d257-4d77-9b53-0fde0a84081", "record_id": "flaws_cloudtrail:0000389:5e3a2357-d257-4d77-9b53-0fde0a84081", "row_index": 389, "timestamp": "2019-07-08T15:43:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e3a2357-d257-4d77-9b53-0fde0a84081", "eventTime": "2019-07-08T15:43:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "964e5c84-9577-407a-85eb-95d7743bfed4", "record_id": "flaws_cloudtrail:0000390:964e5c84-9577-407a-85eb-95d7743bfed4", "row_index": 390, "timestamp": "2019-07-08T15:43:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "964e5c84-9577-407a-85eb-95d7743bfed4", "eventTime": "2019-07-08T15:43:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e9abba9-2547-4fde-998c-7755a2ee80e7", "record_id": "flaws_cloudtrail:0000391:8e9abba9-2547-4fde-998c-7755a2ee80e7", "row_index": 391, "timestamp": "2019-07-08T15:43:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e9abba9-2547-4fde-998c-7755a2ee80e7", "eventTime": "2019-07-08T15:43:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "712808-1287-4f20-ac90-0f1fc20d5d51", "record_id": "flaws_cloudtrail:0000392:712808-1287-4f20-ac90-0f1fc20d5d51", "row_index": 392, "timestamp": "2019-07-08T15:43:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "712808-1287-4f20-ac90-0f1fc20d5d51", "eventTime": "2019-07-08T15:43:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa1501d2-c048-401f-a0dd-b9215ec59a70", "record_id": "flaws_cloudtrail:0000393:aa1501d2-c048-401f-a0dd-b9215ec59a70", "row_index": 393, "timestamp": "2019-07-08T15:43:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa1501d2-c048-401f-a0dd-b9215ec59a70", "eventTime": "2019-07-08T15:43:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d94573-f531-4075-90f2-af5554ada003", "record_id": "flaws_cloudtrail:0000394:3d94573-f531-4075-90f2-af5554ada003", "row_index": 394, "timestamp": "2019-07-08T15:43:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d94573-f531-4075-90f2-af5554ada003", "eventTime": "2019-07-08T15:43:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "815455e4b-e383-403d-b204-2c6e9bf3a336", "record_id": "flaws_cloudtrail:0000395:815455e4b-e383-403d-b204-2c6e9bf3a336", "row_index": 395, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "815455e4b-e383-403d-b204-2c6e9bf3a336", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fc20db6-3ea3-4e6f-8e38-32a7eabd50de", "record_id": "flaws_cloudtrail:0000396:7fc20db6-3ea3-4e6f-8e38-32a7eabd50de", "row_index": 396, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fc20db6-3ea3-4e6f-8e38-32a7eabd50de", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5cfa724-946d-45bc-9a70-491ccbb2bf38", "record_id": "flaws_cloudtrail:0000397:f5cfa724-946d-45bc-9a70-491ccbb2bf38", "row_index": 397, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5cfa724-946d-45bc-9a70-491ccbb2bf38", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d4c93dc-99b5-4097-b7b6-70a647211f32c", "record_id": "flaws_cloudtrail:0000398:7d4c93dc-99b5-4097-b7b6-70a647211f32c", "row_index": 398, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d4c93dc-99b5-4097-b7b6-70a647211f32c", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47aa6caa-e452-44ce-96ce-8db17a6fdf97", "record_id": "flaws_cloudtrail:0000399:47aa6caa-e452-44ce-96ce-8db17a6fdf97", "row_index": 399, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47aa6caa-e452-44ce-96ce-8db17a6fdf97", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc3b0820-115b-4c8c-972f-3b5202a92e0b", "record_id": "flaws_cloudtrail:0000400:cc3b0820-115b-4c8c-972f-3b5202a92e0b", "row_index": 400, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc3b0820-115b-4c8c-972f-3b5202a92e0b", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bad814d9-66c8-45ed-9c7c-54a7b048e9ca", "record_id": "flaws_cloudtrail:0000401:bad814d9-66c8-45ed-9c7c-54a7b048e9ca", "row_index": 401, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bad814d9-66c8-45ed-9c7c-54a7b048e9ca", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "989e1538-4c84-45d8-a2ef-58b992ff05dd", "record_id": "flaws_cloudtrail:0000402:989e1538-4c84-45d8-a2ef-58b992ff05dd", "row_index": 402, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "989e1538-4c84-45d8-a2ef-58b992ff05dd", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0acc0649-58e4-4f89-b902-1b124dd98034", "record_id": "flaws_cloudtrail:0000403:0acc0649-58e4-4f89-b902-1b124dd98034", "row_index": 403, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0acc0649-58e4-4f89-b902-1b124dd98034", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4eee559-629f-4004-8d65-d2822e9b89cd", "record_id": "flaws_cloudtrail:0000404:f4eee559-629f-4004-8d65-d2822e9b89cd", "row_index": 404, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4eee559-629f-4004-8d65-d2822e9b89cd", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "815455e4b-e383-403d-b204-2c6e9bf3a336", "record_id": "flaws_cloudtrail:0000405:815455e4b-e383-403d-b204-2c6e9bf3a336", "row_index": 405, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "815455e4b-e383-403d-b204-2c6e9bf3a336", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fc20db6-3ea3-4e6f-8e38-32a7eabd50de", "record_id": "flaws_cloudtrail:0000406:7fc20db6-3ea3-4e6f-8e38-32a7eabd50de", "row_index": 406, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fc20db6-3ea3-4e6f-8e38-32a7eabd50de", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5cfa724-946d-45bc-9a70-491ccbb2bf38", "record_id": "flaws_cloudtrail:0000407:f5cfa724-946d-45bc-9a70-491ccbb2bf38", "row_index": 407, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5cfa724-946d-45bc-9a70-491ccbb2bf38", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d4c93dc-99b5-4097-b7b6-70a647211f32c", "record_id": "flaws_cloudtrail:0000408:7d4c93dc-99b5-4097-b7b6-70a647211f32c", "row_index": 408, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d4c93dc-99b5-4097-b7b6-70a647211f32c", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47aa6caa-e452-44ce-96ce-8db17a6fdf97", "record_id": "flaws_cloudtrail:0000409:47aa6caa-e452-44ce-96ce-8db17a6fdf97", "row_index": 409, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47aa6caa-e452-44ce-96ce-8db17a6fdf97", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc3b0820-115b-4c8c-972f-3b5202a92e0b", "record_id": "flaws_cloudtrail:0000410:cc3b0820-115b-4c8c-972f-3b5202a92e0b", "row_index": 410, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc3b0820-115b-4c8c-972f-3b5202a92e0b", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bad814d9-66c8-45ed-9c7c-54a7b048e9ca", "record_id": "flaws_cloudtrail:0000411:bad814d9-66c8-45ed-9c7c-54a7b048e9ca", "row_index": 411, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bad814d9-66c8-45ed-9c7c-54a7b048e9ca", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "989e1538-4c84-45d8-a2ef-58b992ff05dd", "record_id": "flaws_cloudtrail:0000412:989e1538-4c84-45d8-a2ef-58b992ff05dd", "row_index": 412, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "989e1538-4c84-45d8-a2ef-58b992ff05dd", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0acc0649-58e4-4f89-b902-1b124dd98034", "record_id": "flaws_cloudtrail:0000413:0acc0649-58e4-4f89-b902-1b124dd98034", "row_index": 413, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0acc0649-58e4-4f89-b902-1b124dd98034", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4eee559-629f-4004-8d65-d2822e9b89cd", "record_id": "flaws_cloudtrail:0000414:f4eee559-629f-4004-8d65-d2822e9b89cd", "row_index": 414, "timestamp": "2019-07-08T15:43:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4eee559-629f-4004-8d65-d2822e9b89cd", "eventTime": "2019-07-08T15:43:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a4ccf74-9d2a-4d70-8c79-66928cff46c", "record_id": "flaws_cloudtrail:0000415:3a4ccf74-9d2a-4d70-8c79-66928cff46c", "row_index": 415, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a4ccf74-9d2a-4d70-8c79-66928cff46c", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef150c37-073d-4884-a2eb-4321ef3cfe9c", "record_id": "flaws_cloudtrail:0000416:ef150c37-073d-4884-a2eb-4321ef3cfe9c", "row_index": 416, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef150c37-073d-4884-a2eb-4321ef3cfe9c", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c26812-e7f8-46c6-a391-efdbd2f7352c", "record_id": "flaws_cloudtrail:0000417:c26812-e7f8-46c6-a391-efdbd2f7352c", "row_index": 417, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c26812-e7f8-46c6-a391-efdbd2f7352c", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f78f0ed0-eb7d-4999-b301-2bfca0eaea18", "record_id": "flaws_cloudtrail:0000418:f78f0ed0-eb7d-4999-b301-2bfca0eaea18", "row_index": 418, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f78f0ed0-eb7d-4999-b301-2bfca0eaea18", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a53943b-033d-43ef-8d21-56fa3ae223d8", "record_id": "flaws_cloudtrail:0000419:a53943b-033d-43ef-8d21-56fa3ae223d8", "row_index": 419, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a53943b-033d-43ef-8d21-56fa3ae223d8", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad7443c2-c187-484b-bb52-ac240902c55af", "record_id": "flaws_cloudtrail:0000420:ad7443c2-c187-484b-bb52-ac240902c55af", "row_index": 420, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad7443c2-c187-484b-bb52-ac240902c55af", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db9b9565-5036-42a2-ac3c-19c2997a024e", "record_id": "flaws_cloudtrail:0000421:db9b9565-5036-42a2-ac3c-19c2997a024e", "row_index": 421, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db9b9565-5036-42a2-ac3c-19c2997a024e", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fb41ad7-05ec-448d-92fc-cb0c78656f95", "record_id": "flaws_cloudtrail:0000422:5fb41ad7-05ec-448d-92fc-cb0c78656f95", "row_index": 422, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fb41ad7-05ec-448d-92fc-cb0c78656f95", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b720377c-b65c-4593-930d-d5c27fa0008d", "record_id": "flaws_cloudtrail:0000423:b720377c-b65c-4593-930d-d5c27fa0008d", "row_index": 423, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b720377c-b65c-4593-930d-d5c27fa0008d", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85416a0-bb31-44aa-b44f-aed52742db68", "record_id": "flaws_cloudtrail:0000424:85416a0-bb31-44aa-b44f-aed52742db68", "row_index": 424, "timestamp": "2019-07-08T15:43:43Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85416a0-bb31-44aa-b44f-aed52742db68", "eventTime": "2019-07-08T15:43:43Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9d157a9-e759-4452-85ae-f54393c32ea9", "record_id": "flaws_cloudtrail:0000425:a9d157a9-e759-4452-85ae-f54393c32ea9", "row_index": 425, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9d157a9-e759-4452-85ae-f54393c32ea9", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb4c567b-3c3c-4a2d-9e99-fd8c49e555c4", "record_id": "flaws_cloudtrail:0000426:bb4c567b-3c3c-4a2d-9e99-fd8c49e555c4", "row_index": 426, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb4c567b-3c3c-4a2d-9e99-fd8c49e555c4", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5a077fa-ec93-49e6-80dc-91b6bae2fe53", "record_id": "flaws_cloudtrail:0000427:e5a077fa-ec93-49e6-80dc-91b6bae2fe53", "row_index": 427, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5a077fa-ec93-49e6-80dc-91b6bae2fe53", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a4ccf74-9d2a-4d70-8c79-66928cff46c", "record_id": "flaws_cloudtrail:0000428:3a4ccf74-9d2a-4d70-8c79-66928cff46c", "row_index": 428, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a4ccf74-9d2a-4d70-8c79-66928cff46c", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef150c37-073d-4884-a2eb-4321ef3cfe9c", "record_id": "flaws_cloudtrail:0000429:ef150c37-073d-4884-a2eb-4321ef3cfe9c", "row_index": 429, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef150c37-073d-4884-a2eb-4321ef3cfe9c", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c26812-e7f8-46c6-a391-efdbd2f7352c", "record_id": "flaws_cloudtrail:0000430:c26812-e7f8-46c6-a391-efdbd2f7352c", "row_index": 430, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c26812-e7f8-46c6-a391-efdbd2f7352c", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f78f0ed0-eb7d-4999-b301-2bfca0eaea18", "record_id": "flaws_cloudtrail:0000431:f78f0ed0-eb7d-4999-b301-2bfca0eaea18", "row_index": 431, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f78f0ed0-eb7d-4999-b301-2bfca0eaea18", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a53943b-033d-43ef-8d21-56fa3ae223d8", "record_id": "flaws_cloudtrail:0000432:a53943b-033d-43ef-8d21-56fa3ae223d8", "row_index": 432, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a53943b-033d-43ef-8d21-56fa3ae223d8", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad7443c2-c187-484b-bb52-ac240902c55af", "record_id": "flaws_cloudtrail:0000433:ad7443c2-c187-484b-bb52-ac240902c55af", "row_index": 433, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad7443c2-c187-484b-bb52-ac240902c55af", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db9b9565-5036-42a2-ac3c-19c2997a024e", "record_id": "flaws_cloudtrail:0000434:db9b9565-5036-42a2-ac3c-19c2997a024e", "row_index": 434, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db9b9565-5036-42a2-ac3c-19c2997a024e", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fb41ad7-05ec-448d-92fc-cb0c78656f95", "record_id": "flaws_cloudtrail:0000435:5fb41ad7-05ec-448d-92fc-cb0c78656f95", "row_index": 435, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fb41ad7-05ec-448d-92fc-cb0c78656f95", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b720377c-b65c-4593-930d-d5c27fa0008d", "record_id": "flaws_cloudtrail:0000436:b720377c-b65c-4593-930d-d5c27fa0008d", "row_index": 436, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b720377c-b65c-4593-930d-d5c27fa0008d", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85416a0-bb31-44aa-b44f-aed52742db68", "record_id": "flaws_cloudtrail:0000437:85416a0-bb31-44aa-b44f-aed52742db68", "row_index": 437, "timestamp": "2019-07-08T15:43:43Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85416a0-bb31-44aa-b44f-aed52742db68", "eventTime": "2019-07-08T15:43:43Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9d157a9-e759-4452-85ae-f54393c32ea9", "record_id": "flaws_cloudtrail:0000438:a9d157a9-e759-4452-85ae-f54393c32ea9", "row_index": 438, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9d157a9-e759-4452-85ae-f54393c32ea9", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb4c567b-3c3c-4a2d-9e99-fd8c49e555c4", "record_id": "flaws_cloudtrail:0000439:bb4c567b-3c3c-4a2d-9e99-fd8c49e555c4", "row_index": 439, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb4c567b-3c3c-4a2d-9e99-fd8c49e555c4", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5a077fa-ec93-49e6-80dc-91b6bae2fe53", "record_id": "flaws_cloudtrail:0000440:e5a077fa-ec93-49e6-80dc-91b6bae2fe53", "row_index": 440, "timestamp": "2019-07-08T15:43:43Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5a077fa-ec93-49e6-80dc-91b6bae2fe53", "eventTime": "2019-07-08T15:43:43Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a91031-3372-4ae2-9790-bd3f184c4edc", "record_id": "flaws_cloudtrail:0000441:a91031-3372-4ae2-9790-bd3f184c4edc", "row_index": 441, "timestamp": "2019-07-08T15:43:44Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a91031-3372-4ae2-9790-bd3f184c4edc", "eventTime": "2019-07-08T15:43:44Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c254c823-9c5e-4eec-ba3c-f6a429f9f7e9", "record_id": "flaws_cloudtrail:0000442:c254c823-9c5e-4eec-ba3c-f6a429f9f7e9", "row_index": 442, "timestamp": "2019-07-08T15:43:44Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c254c823-9c5e-4eec-ba3c-f6a429f9f7e9", "eventTime": "2019-07-08T15:43:44Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9ec9fd5-16ce-4c1e-af9b-9d9a1b89bdf3", "record_id": "flaws_cloudtrail:0000443:b9ec9fd5-16ce-4c1e-af9b-9d9a1b89bdf3", "row_index": 443, "timestamp": "2019-07-08T15:43:44Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9ec9fd5-16ce-4c1e-af9b-9d9a1b89bdf3", "eventTime": "2019-07-08T15:43:44Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "708173fab-f252-4569-8200-56085aa45ef", "record_id": "flaws_cloudtrail:0000444:708173fab-f252-4569-8200-56085aa45ef", "row_index": 444, "timestamp": "2019-07-08T15:43:44Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "708173fab-f252-4569-8200-56085aa45ef", "eventTime": "2019-07-08T15:43:44Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d41c5eff-cdd5-400e-afb8-dde767619c998", "record_id": "flaws_cloudtrail:0000445:d41c5eff-cdd5-400e-afb8-dde767619c998", "row_index": 445, "timestamp": "2019-07-08T15:43:44Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d41c5eff-cdd5-400e-afb8-dde767619c998", "eventTime": "2019-07-08T15:43:44Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b493582d-b972-4009-a268-56de30002b3b", "record_id": "flaws_cloudtrail:0000446:b493582d-b972-4009-a268-56de30002b3b", "row_index": 446, "timestamp": "2019-07-08T15:43:44Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b493582d-b972-4009-a268-56de30002b3b", "eventTime": "2019-07-08T15:43:44Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e40b5f8-7579-4b87-9cfc-9072fff9e8d4", "record_id": "flaws_cloudtrail:0000447:1e40b5f8-7579-4b87-9cfc-9072fff9e8d4", "row_index": 447, "timestamp": "2019-07-08T15:43:44Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e40b5f8-7579-4b87-9cfc-9072fff9e8d4", "eventTime": "2019-07-08T15:43:44Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a91031-3372-4ae2-9790-bd3f184c4edc", "record_id": "flaws_cloudtrail:0000448:a91031-3372-4ae2-9790-bd3f184c4edc", "row_index": 448, "timestamp": "2019-07-08T15:43:44Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a91031-3372-4ae2-9790-bd3f184c4edc", "eventTime": "2019-07-08T15:43:44Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c254c823-9c5e-4eec-ba3c-f6a429f9f7e9", "record_id": "flaws_cloudtrail:0000449:c254c823-9c5e-4eec-ba3c-f6a429f9f7e9", "row_index": 449, "timestamp": "2019-07-08T15:43:44Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c254c823-9c5e-4eec-ba3c-f6a429f9f7e9", "eventTime": "2019-07-08T15:43:44Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9ec9fd5-16ce-4c1e-af9b-9d9a1b89bdf3", "record_id": "flaws_cloudtrail:0000450:b9ec9fd5-16ce-4c1e-af9b-9d9a1b89bdf3", "row_index": 450, "timestamp": "2019-07-08T15:43:44Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9ec9fd5-16ce-4c1e-af9b-9d9a1b89bdf3", "eventTime": "2019-07-08T15:43:44Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "708173fab-f252-4569-8200-56085aa45ef", "record_id": "flaws_cloudtrail:0000451:708173fab-f252-4569-8200-56085aa45ef", "row_index": 451, "timestamp": "2019-07-08T15:43:44Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "708173fab-f252-4569-8200-56085aa45ef", "eventTime": "2019-07-08T15:43:44Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d41c5eff-cdd5-400e-afb8-dde767619c998", "record_id": "flaws_cloudtrail:0000452:d41c5eff-cdd5-400e-afb8-dde767619c998", "row_index": 452, "timestamp": "2019-07-08T15:43:44Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d41c5eff-cdd5-400e-afb8-dde767619c998", "eventTime": "2019-07-08T15:43:44Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b493582d-b972-4009-a268-56de30002b3b", "record_id": "flaws_cloudtrail:0000453:b493582d-b972-4009-a268-56de30002b3b", "row_index": 453, "timestamp": "2019-07-08T15:43:44Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b493582d-b972-4009-a268-56de30002b3b", "eventTime": "2019-07-08T15:43:44Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e40b5f8-7579-4b87-9cfc-9072fff9e8d4", "record_id": "flaws_cloudtrail:0000454:1e40b5f8-7579-4b87-9cfc-9072fff9e8d4", "row_index": 454, "timestamp": "2019-07-08T15:43:44Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e40b5f8-7579-4b87-9cfc-9072fff9e8d4", "eventTime": "2019-07-08T15:43:44Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e04fc5b5-1dcc-4552-84b3-20bf64d857ed", "record_id": "flaws_cloudtrail:0000455:e04fc5b5-1dcc-4552-84b3-20bf64d857ed", "row_index": 455, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e04fc5b5-1dcc-4552-84b3-20bf64d857ed", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59c218ab-5fa9-4ce3-82dd-37849cb0c3a1", "record_id": "flaws_cloudtrail:0000456:59c218ab-5fa9-4ce3-82dd-37849cb0c3a1", "row_index": 456, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59c218ab-5fa9-4ce3-82dd-37849cb0c3a1", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "036d0684-9e01-4c1d-b504-837dd2f6a563", "record_id": "flaws_cloudtrail:0000457:036d0684-9e01-4c1d-b504-837dd2f6a563", "row_index": 457, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "036d0684-9e01-4c1d-b504-837dd2f6a563", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "337591d06-86a2-4322-a438-bb32a52f55b7", "record_id": "flaws_cloudtrail:0000458:337591d06-86a2-4322-a438-bb32a52f55b7", "row_index": 458, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "337591d06-86a2-4322-a438-bb32a52f55b7", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cbe1d12-29fc-44e5-a3a4-506385c630df2", "record_id": "flaws_cloudtrail:0000459:4cbe1d12-29fc-44e5-a3a4-506385c630df2", "row_index": 459, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cbe1d12-29fc-44e5-a3a4-506385c630df2", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d7c906d-4c6c-4cc6-ad88-4d547f5aaf99", "record_id": "flaws_cloudtrail:0000460:8d7c906d-4c6c-4cc6-ad88-4d547f5aaf99", "row_index": 460, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d7c906d-4c6c-4cc6-ad88-4d547f5aaf99", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25db1dc0-0b07-4d6d-999a-0e0cc645f4c3", "record_id": "flaws_cloudtrail:0000461:25db1dc0-0b07-4d6d-999a-0e0cc645f4c3", "row_index": 461, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25db1dc0-0b07-4d6d-999a-0e0cc645f4c3", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "063bdfd5-9582-4604-8bc8-97e818badd00", "record_id": "flaws_cloudtrail:0000462:063bdfd5-9582-4604-8bc8-97e818badd00", "row_index": 462, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "063bdfd5-9582-4604-8bc8-97e818badd00", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c08548ce-1442-4754-978a-89af376e3dbb", "record_id": "flaws_cloudtrail:0000463:c08548ce-1442-4754-978a-89af376e3dbb", "row_index": 463, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c08548ce-1442-4754-978a-89af376e3dbb", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "425c34ac-e772-4cb0-a43d-ef45bab0c7c8", "record_id": "flaws_cloudtrail:0000464:425c34ac-e772-4cb0-a43d-ef45bab0c7c8", "row_index": 464, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "425c34ac-e772-4cb0-a43d-ef45bab0c7c8", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43f9761e-2fee-43a0-8847-8b8d2ef47c1f", "record_id": "flaws_cloudtrail:0000465:43f9761e-2fee-43a0-8847-8b8d2ef47c1f", "row_index": 465, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43f9761e-2fee-43a0-8847-8b8d2ef47c1f", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dd718bb-59f0-45bb-a4c5-dc93666c65", "record_id": "flaws_cloudtrail:0000466:1dd718bb-59f0-45bb-a4c5-dc93666c65", "row_index": 466, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dd718bb-59f0-45bb-a4c5-dc93666c65", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e43867-1756-4349-8fa2-76ac0c5920d3", "record_id": "flaws_cloudtrail:0000467:6e43867-1756-4349-8fa2-76ac0c5920d3", "row_index": 467, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e43867-1756-4349-8fa2-76ac0c5920d3", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "605e181e-4368-4756-83aa-d6b04be909f7", "record_id": "flaws_cloudtrail:0000468:605e181e-4368-4756-83aa-d6b04be909f7", "row_index": 468, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "605e181e-4368-4756-83aa-d6b04be909f7", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e14ae40a-22b0-421f-9700-50e5f699b8ec", "record_id": "flaws_cloudtrail:0000469:e14ae40a-22b0-421f-9700-50e5f699b8ec", "row_index": 469, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e14ae40a-22b0-421f-9700-50e5f699b8ec", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01b292df-62d0-4453-8d67-5ed5616ed9d9", "record_id": "flaws_cloudtrail:0000470:01b292df-62d0-4453-8d67-5ed5616ed9d9", "row_index": 470, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01b292df-62d0-4453-8d67-5ed5616ed9d9", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c99ca9f7-d0b4-4b0b-b6b7-04eb581b9ae5", "record_id": "flaws_cloudtrail:0000471:c99ca9f7-d0b4-4b0b-b6b7-04eb581b9ae5", "row_index": 471, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c99ca9f7-d0b4-4b0b-b6b7-04eb581b9ae5", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d9011ce-045b-47d6-990f-028a0b87738d", "record_id": "flaws_cloudtrail:0000472:8d9011ce-045b-47d6-990f-028a0b87738d", "row_index": 472, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d9011ce-045b-47d6-990f-028a0b87738d", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72293a79-7fc9-4922-b9ae-d1df56459e9b", "record_id": "flaws_cloudtrail:0000473:72293a79-7fc9-4922-b9ae-d1df56459e9b", "row_index": 473, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72293a79-7fc9-4922-b9ae-d1df56459e9b", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed72b99b-d244-4e1d-8cb6-e227e07109d8", "record_id": "flaws_cloudtrail:0000474:ed72b99b-d244-4e1d-8cb6-e227e07109d8", "row_index": 474, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed72b99b-d244-4e1d-8cb6-e227e07109d8", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e04fc5b5-1dcc-4552-84b3-20bf64d857ed", "record_id": "flaws_cloudtrail:0000475:e04fc5b5-1dcc-4552-84b3-20bf64d857ed", "row_index": 475, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e04fc5b5-1dcc-4552-84b3-20bf64d857ed", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59c218ab-5fa9-4ce3-82dd-37849cb0c3a1", "record_id": "flaws_cloudtrail:0000476:59c218ab-5fa9-4ce3-82dd-37849cb0c3a1", "row_index": 476, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59c218ab-5fa9-4ce3-82dd-37849cb0c3a1", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "036d0684-9e01-4c1d-b504-837dd2f6a563", "record_id": "flaws_cloudtrail:0000477:036d0684-9e01-4c1d-b504-837dd2f6a563", "row_index": 477, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "036d0684-9e01-4c1d-b504-837dd2f6a563", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "337591d06-86a2-4322-a438-bb32a52f55b7", "record_id": "flaws_cloudtrail:0000478:337591d06-86a2-4322-a438-bb32a52f55b7", "row_index": 478, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "337591d06-86a2-4322-a438-bb32a52f55b7", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cbe1d12-29fc-44e5-a3a4-506385c630df2", "record_id": "flaws_cloudtrail:0000479:4cbe1d12-29fc-44e5-a3a4-506385c630df2", "row_index": 479, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cbe1d12-29fc-44e5-a3a4-506385c630df2", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d7c906d-4c6c-4cc6-ad88-4d547f5aaf99", "record_id": "flaws_cloudtrail:0000480:8d7c906d-4c6c-4cc6-ad88-4d547f5aaf99", "row_index": 480, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d7c906d-4c6c-4cc6-ad88-4d547f5aaf99", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25db1dc0-0b07-4d6d-999a-0e0cc645f4c3", "record_id": "flaws_cloudtrail:0000481:25db1dc0-0b07-4d6d-999a-0e0cc645f4c3", "row_index": 481, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25db1dc0-0b07-4d6d-999a-0e0cc645f4c3", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "063bdfd5-9582-4604-8bc8-97e818badd00", "record_id": "flaws_cloudtrail:0000482:063bdfd5-9582-4604-8bc8-97e818badd00", "row_index": 482, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "063bdfd5-9582-4604-8bc8-97e818badd00", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c08548ce-1442-4754-978a-89af376e3dbb", "record_id": "flaws_cloudtrail:0000483:c08548ce-1442-4754-978a-89af376e3dbb", "row_index": 483, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c08548ce-1442-4754-978a-89af376e3dbb", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "425c34ac-e772-4cb0-a43d-ef45bab0c7c8", "record_id": "flaws_cloudtrail:0000484:425c34ac-e772-4cb0-a43d-ef45bab0c7c8", "row_index": 484, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "425c34ac-e772-4cb0-a43d-ef45bab0c7c8", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43f9761e-2fee-43a0-8847-8b8d2ef47c1f", "record_id": "flaws_cloudtrail:0000485:43f9761e-2fee-43a0-8847-8b8d2ef47c1f", "row_index": 485, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43f9761e-2fee-43a0-8847-8b8d2ef47c1f", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dd718bb-59f0-45bb-a4c5-dc93666c65", "record_id": "flaws_cloudtrail:0000486:1dd718bb-59f0-45bb-a4c5-dc93666c65", "row_index": 486, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dd718bb-59f0-45bb-a4c5-dc93666c65", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e43867-1756-4349-8fa2-76ac0c5920d3", "record_id": "flaws_cloudtrail:0000487:6e43867-1756-4349-8fa2-76ac0c5920d3", "row_index": 487, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e43867-1756-4349-8fa2-76ac0c5920d3", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "605e181e-4368-4756-83aa-d6b04be909f7", "record_id": "flaws_cloudtrail:0000488:605e181e-4368-4756-83aa-d6b04be909f7", "row_index": 488, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "605e181e-4368-4756-83aa-d6b04be909f7", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e14ae40a-22b0-421f-9700-50e5f699b8ec", "record_id": "flaws_cloudtrail:0000489:e14ae40a-22b0-421f-9700-50e5f699b8ec", "row_index": 489, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e14ae40a-22b0-421f-9700-50e5f699b8ec", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01b292df-62d0-4453-8d67-5ed5616ed9d9", "record_id": "flaws_cloudtrail:0000490:01b292df-62d0-4453-8d67-5ed5616ed9d9", "row_index": 490, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01b292df-62d0-4453-8d67-5ed5616ed9d9", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c99ca9f7-d0b4-4b0b-b6b7-04eb581b9ae5", "record_id": "flaws_cloudtrail:0000491:c99ca9f7-d0b4-4b0b-b6b7-04eb581b9ae5", "row_index": 491, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c99ca9f7-d0b4-4b0b-b6b7-04eb581b9ae5", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d9011ce-045b-47d6-990f-028a0b87738d", "record_id": "flaws_cloudtrail:0000492:8d9011ce-045b-47d6-990f-028a0b87738d", "row_index": 492, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d9011ce-045b-47d6-990f-028a0b87738d", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72293a79-7fc9-4922-b9ae-d1df56459e9b", "record_id": "flaws_cloudtrail:0000493:72293a79-7fc9-4922-b9ae-d1df56459e9b", "row_index": 493, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72293a79-7fc9-4922-b9ae-d1df56459e9b", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed72b99b-d244-4e1d-8cb6-e227e07109d8", "record_id": "flaws_cloudtrail:0000494:ed72b99b-d244-4e1d-8cb6-e227e07109d8", "row_index": 494, "timestamp": "2019-07-08T15:43:45Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed72b99b-d244-4e1d-8cb6-e227e07109d8", "eventTime": "2019-07-08T15:43:45Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0a126e5-742f-4a3e-9571-98280cf31bd2", "record_id": "flaws_cloudtrail:0000495:b0a126e5-742f-4a3e-9571-98280cf31bd2", "row_index": 495, "timestamp": "2019-07-08T15:43:46Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0a126e5-742f-4a3e-9571-98280cf31bd2", "eventTime": "2019-07-08T15:43:46Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db0f4c2b-ba6c-46eb-b08c-7f31c5c3b81c", "record_id": "flaws_cloudtrail:0000496:db0f4c2b-ba6c-46eb-b08c-7f31c5c3b81c", "row_index": 496, "timestamp": "2019-07-08T15:43:46Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db0f4c2b-ba6c-46eb-b08c-7f31c5c3b81c", "eventTime": "2019-07-08T15:43:46Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "605bd7ee-0893-45f8-a244-72ea3ea710e7", "record_id": "flaws_cloudtrail:0000497:605bd7ee-0893-45f8-a244-72ea3ea710e7", "row_index": 497, "timestamp": "2019-07-08T15:43:46Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "605bd7ee-0893-45f8-a244-72ea3ea710e7", "eventTime": "2019-07-08T15:43:46Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f841cb70-b446-4357-9e55-21a4142e1f88", "record_id": "flaws_cloudtrail:0000498:f841cb70-b446-4357-9e55-21a4142e1f88", "row_index": 498, "timestamp": "2019-07-08T15:43:46Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f841cb70-b446-4357-9e55-21a4142e1f88", "eventTime": "2019-07-08T15:43:46Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5c419269-5bec-419d-95c1-457f2e8e3b38", "record_id": "flaws_cloudtrail:0000499:b5c419269-5bec-419d-95c1-457f2e8e3b38", "row_index": 499, "timestamp": "2019-07-08T15:43:46Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5c419269-5bec-419d-95c1-457f2e8e3b38", "eventTime": "2019-07-08T15:43:46Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd6f79d1-5be6-4fbe-b785-89df8f86da8e", "record_id": "flaws_cloudtrail:0000500:dd6f79d1-5be6-4fbe-b785-89df8f86da8e", "row_index": 500, "timestamp": "2019-07-08T15:43:46Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd6f79d1-5be6-4fbe-b785-89df8f86da8e", "eventTime": "2019-07-08T15:43:46Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0a126e5-742f-4a3e-9571-98280cf31bd2", "record_id": "flaws_cloudtrail:0000501:b0a126e5-742f-4a3e-9571-98280cf31bd2", "row_index": 501, "timestamp": "2019-07-08T15:43:46Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0a126e5-742f-4a3e-9571-98280cf31bd2", "eventTime": "2019-07-08T15:43:46Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db0f4c2b-ba6c-46eb-b08c-7f31c5c3b81c", "record_id": "flaws_cloudtrail:0000502:db0f4c2b-ba6c-46eb-b08c-7f31c5c3b81c", "row_index": 502, "timestamp": "2019-07-08T15:43:46Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db0f4c2b-ba6c-46eb-b08c-7f31c5c3b81c", "eventTime": "2019-07-08T15:43:46Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "605bd7ee-0893-45f8-a244-72ea3ea710e7", "record_id": "flaws_cloudtrail:0000503:605bd7ee-0893-45f8-a244-72ea3ea710e7", "row_index": 503, "timestamp": "2019-07-08T15:43:46Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "605bd7ee-0893-45f8-a244-72ea3ea710e7", "eventTime": "2019-07-08T15:43:46Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f841cb70-b446-4357-9e55-21a4142e1f88", "record_id": "flaws_cloudtrail:0000504:f841cb70-b446-4357-9e55-21a4142e1f88", "row_index": 504, "timestamp": "2019-07-08T15:43:46Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f841cb70-b446-4357-9e55-21a4142e1f88", "eventTime": "2019-07-08T15:43:46Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5c419269-5bec-419d-95c1-457f2e8e3b38", "record_id": "flaws_cloudtrail:0000505:b5c419269-5bec-419d-95c1-457f2e8e3b38", "row_index": 505, "timestamp": "2019-07-08T15:43:46Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5c419269-5bec-419d-95c1-457f2e8e3b38", "eventTime": "2019-07-08T15:43:46Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigRules", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd6f79d1-5be6-4fbe-b785-89df8f86da8e", "record_id": "flaws_cloudtrail:0000506:dd6f79d1-5be6-4fbe-b785-89df8f86da8e", "row_index": 506, "timestamp": "2019-07-08T15:43:46Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd6f79d1-5be6-4fbe-b785-89df8f86da8e", "eventTime": "2019-07-08T15:43:46Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: config:DescribeConfigurationRecorders", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dd3cf06-547a-4b4d-9cb6-f80ee33e3d52", "record_id": "flaws_cloudtrail:0000507:0dd3cf06-547a-4b4d-9cb6-f80ee33e3d52", "row_index": 507, "timestamp": "2019-07-08T15:43:47Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dd3cf06-547a-4b4d-9cb6-f80ee33e3d52", "eventTime": "2019-07-08T15:43:47Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66aa3a4c-3dec-4218-9a69-216332c006f5", "record_id": "flaws_cloudtrail:0000508:66aa3a4c-3dec-4218-9a69-216332c006f5", "row_index": 508, "timestamp": "2019-07-08T15:43:47Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66aa3a4c-3dec-4218-9a69-216332c006f5", "eventTime": "2019-07-08T15:43:47Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b15c004-d967-4a96-b4d4-185c713b2ef1", "record_id": "flaws_cloudtrail:0000509:6b15c004-d967-4a96-b4d4-185c713b2ef1", "row_index": 509, "timestamp": "2019-07-08T15:43:47Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b15c004-d967-4a96-b4d4-185c713b2ef1", "eventTime": "2019-07-08T15:43:47Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc832caf-a946-40f3-a08e-9e9bb06d973a", "record_id": "flaws_cloudtrail:0000510:bc832caf-a946-40f3-a08e-9e9bb06d973a", "row_index": 510, "timestamp": "2019-07-08T15:43:47Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc832caf-a946-40f3-a08e-9e9bb06d973a", "eventTime": "2019-07-08T15:43:47Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48a15d57-9cd1-4b7d-bb4c-35c619bc0592", "record_id": "flaws_cloudtrail:0000511:48a15d57-9cd1-4b7d-bb4c-35c619bc0592", "row_index": 511, "timestamp": "2019-07-08T15:43:47Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48a15d57-9cd1-4b7d-bb4c-35c619bc0592", "eventTime": "2019-07-08T15:43:47Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6649fecd-478e-4dd6-935e-4885e057de71", "record_id": "flaws_cloudtrail:0000512:6649fecd-478e-4dd6-935e-4885e057de71", "row_index": 512, "timestamp": "2019-07-08T15:43:47Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6649fecd-478e-4dd6-935e-4885e057de71", "eventTime": "2019-07-08T15:43:47Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b76503c2-828b-4d62-9813-840f66b5ce93", "record_id": "flaws_cloudtrail:0000513:b76503c2-828b-4d62-9813-840f66b5ce93", "row_index": 513, "timestamp": "2019-07-08T15:43:47Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b76503c2-828b-4d62-9813-840f66b5ce93", "eventTime": "2019-07-08T15:43:47Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "663d59b2-f178-4d64-9863-aaaadb535121c", "record_id": "flaws_cloudtrail:0000514:663d59b2-f178-4d64-9863-aaaadb535121c", "row_index": 514, "timestamp": "2019-07-08T15:43:47Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "663d59b2-f178-4d64-9863-aaaadb535121c", "eventTime": "2019-07-08T15:43:47Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b26f38ce-3544-4cb5-964c-6c7302383785", "record_id": "flaws_cloudtrail:0000515:b26f38ce-3544-4cb5-964c-6c7302383785", "row_index": 515, "timestamp": "2019-07-08T15:43:47Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b26f38ce-3544-4cb5-964c-6c7302383785", "eventTime": "2019-07-08T15:43:47Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dd3cf06-547a-4b4d-9cb6-f80ee33e3d52", "record_id": "flaws_cloudtrail:0000516:0dd3cf06-547a-4b4d-9cb6-f80ee33e3d52", "row_index": 516, "timestamp": "2019-07-08T15:43:47Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dd3cf06-547a-4b4d-9cb6-f80ee33e3d52", "eventTime": "2019-07-08T15:43:47Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66aa3a4c-3dec-4218-9a69-216332c006f5", "record_id": "flaws_cloudtrail:0000517:66aa3a4c-3dec-4218-9a69-216332c006f5", "row_index": 517, "timestamp": "2019-07-08T15:43:47Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66aa3a4c-3dec-4218-9a69-216332c006f5", "eventTime": "2019-07-08T15:43:47Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b15c004-d967-4a96-b4d4-185c713b2ef1", "record_id": "flaws_cloudtrail:0000518:6b15c004-d967-4a96-b4d4-185c713b2ef1", "row_index": 518, "timestamp": "2019-07-08T15:43:47Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b15c004-d967-4a96-b4d4-185c713b2ef1", "eventTime": "2019-07-08T15:43:47Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc832caf-a946-40f3-a08e-9e9bb06d973a", "record_id": "flaws_cloudtrail:0000519:bc832caf-a946-40f3-a08e-9e9bb06d973a", "row_index": 519, "timestamp": "2019-07-08T15:43:47Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc832caf-a946-40f3-a08e-9e9bb06d973a", "eventTime": "2019-07-08T15:43:47Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48a15d57-9cd1-4b7d-bb4c-35c619bc0592", "record_id": "flaws_cloudtrail:0000520:48a15d57-9cd1-4b7d-bb4c-35c619bc0592", "row_index": 520, "timestamp": "2019-07-08T15:43:47Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48a15d57-9cd1-4b7d-bb4c-35c619bc0592", "eventTime": "2019-07-08T15:43:47Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6649fecd-478e-4dd6-935e-4885e057de71", "record_id": "flaws_cloudtrail:0000521:6649fecd-478e-4dd6-935e-4885e057de71", "row_index": 521, "timestamp": "2019-07-08T15:43:47Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6649fecd-478e-4dd6-935e-4885e057de71", "eventTime": "2019-07-08T15:43:47Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b76503c2-828b-4d62-9813-840f66b5ce93", "record_id": "flaws_cloudtrail:0000522:b76503c2-828b-4d62-9813-840f66b5ce93", "row_index": 522, "timestamp": "2019-07-08T15:43:47Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b76503c2-828b-4d62-9813-840f66b5ce93", "eventTime": "2019-07-08T15:43:47Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "663d59b2-f178-4d64-9863-aaaadb535121c", "record_id": "flaws_cloudtrail:0000523:663d59b2-f178-4d64-9863-aaaadb535121c", "row_index": 523, "timestamp": "2019-07-08T15:43:47Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "663d59b2-f178-4d64-9863-aaaadb535121c", "eventTime": "2019-07-08T15:43:47Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b26f38ce-3544-4cb5-964c-6c7302383785", "record_id": "flaws_cloudtrail:0000524:b26f38ce-3544-4cb5-964c-6c7302383785", "row_index": 524, "timestamp": "2019-07-08T15:43:47Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b26f38ce-3544-4cb5-964c-6c7302383785", "eventTime": "2019-07-08T15:43:47Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50cdef45-4b5c-48aa-9235-afe4f1f6240c", "record_id": "flaws_cloudtrail:0000525:50cdef45-4b5c-48aa-9235-afe4f1f6240c", "row_index": 525, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50cdef45-4b5c-48aa-9235-afe4f1f6240c", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c499137e1-4231-4a7e-9380-8b5c4f51052", "record_id": "flaws_cloudtrail:0000526:c499137e1-4231-4a7e-9380-8b5c4f51052", "row_index": 526, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c499137e1-4231-4a7e-9380-8b5c4f51052", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "778eb558-289b-4ed3-935f-7423dd5a2f70", "record_id": "flaws_cloudtrail:0000527:778eb558-289b-4ed3-935f-7423dd5a2f70", "row_index": 527, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "778eb558-289b-4ed3-935f-7423dd5a2f70", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "318d2a1a-417d-4b8d-865b-e5f45208c772", "record_id": "flaws_cloudtrail:0000528:318d2a1a-417d-4b8d-865b-e5f45208c772", "row_index": 528, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "318d2a1a-417d-4b8d-865b-e5f45208c772", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9af3b829-535d-4c6e-93a0-cf8d5c6e8547", "record_id": "flaws_cloudtrail:0000529:9af3b829-535d-4c6e-93a0-cf8d5c6e8547", "row_index": 529, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9af3b829-535d-4c6e-93a0-cf8d5c6e8547", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13e99b7d-8921-44a2-8f50-2ac6885b2c76", "record_id": "flaws_cloudtrail:0000530:13e99b7d-8921-44a2-8f50-2ac6885b2c76", "row_index": 530, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13e99b7d-8921-44a2-8f50-2ac6885b2c76", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d0030eb-36f4-4a9a-b758-5b800ac7a1c2", "record_id": "flaws_cloudtrail:0000531:3d0030eb-36f4-4a9a-b758-5b800ac7a1c2", "row_index": 531, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d0030eb-36f4-4a9a-b758-5b800ac7a1c2", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7544b13-2f31-43c4-a045-a634ab97bbc2", "record_id": "flaws_cloudtrail:0000532:e7544b13-2f31-43c4-a045-a634ab97bbc2", "row_index": 532, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7544b13-2f31-43c4-a045-a634ab97bbc2", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c481aa10-b6a9-4ae5-bedc-5be8db4af6db", "record_id": "flaws_cloudtrail:0000533:c481aa10-b6a9-4ae5-bedc-5be8db4af6db", "row_index": 533, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c481aa10-b6a9-4ae5-bedc-5be8db4af6db", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "121bf190-a494-42c8-acad-b0f715a88236", "record_id": "flaws_cloudtrail:0000534:121bf190-a494-42c8-acad-b0f715a88236", "row_index": 534, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "121bf190-a494-42c8-acad-b0f715a88236", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3904ebfb-bce4-44c6-93fb-cedb8efe057a", "record_id": "flaws_cloudtrail:0000535:3904ebfb-bce4-44c6-93fb-cedb8efe057a", "row_index": 535, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3904ebfb-bce4-44c6-93fb-cedb8efe057a", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c86d27df-3adb-4453-98b8-a8e025f344c5", "record_id": "flaws_cloudtrail:0000536:c86d27df-3adb-4453-98b8-a8e025f344c5", "row_index": 536, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c86d27df-3adb-4453-98b8-a8e025f344c5", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2e5abf3-304c-4606-9543-66a3a3cc0631", "record_id": "flaws_cloudtrail:0000537:c2e5abf3-304c-4606-9543-66a3a3cc0631", "row_index": 537, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2e5abf3-304c-4606-9543-66a3a3cc0631", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "725917e-0a76-489b-9c79-78d1c547899c", "record_id": "flaws_cloudtrail:0000538:725917e-0a76-489b-9c79-78d1c547899c", "row_index": 538, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "725917e-0a76-489b-9c79-78d1c547899c", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eca76e6b-0980-46a0-bf02-cae660d86854", "record_id": "flaws_cloudtrail:0000539:eca76e6b-0980-46a0-bf02-cae660d86854", "row_index": 539, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eca76e6b-0980-46a0-bf02-cae660d86854", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74bd0e5a-a96c-4c45-b159-e80d6df9050b", "record_id": "flaws_cloudtrail:0000540:74bd0e5a-a96c-4c45-b159-e80d6df9050b", "row_index": 540, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74bd0e5a-a96c-4c45-b159-e80d6df9050b", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4167af87-bb55-4cc5-8763-7d97fd6b6e5a", "record_id": "flaws_cloudtrail:0000541:4167af87-bb55-4cc5-8763-7d97fd6b6e5a", "row_index": 541, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4167af87-bb55-4cc5-8763-7d97fd6b6e5a", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd745129a-0919-4807-a91c-44aacd328284", "record_id": "flaws_cloudtrail:0000542:fd745129a-0919-4807-a91c-44aacd328284", "row_index": 542, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd745129a-0919-4807-a91c-44aacd328284", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a59725f-e387-408e-bb28-24f62b24d528", "record_id": "flaws_cloudtrail:0000543:7a59725f-e387-408e-bb28-24f62b24d528", "row_index": 543, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a59725f-e387-408e-bb28-24f62b24d528", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50cdef45-4b5c-48aa-9235-afe4f1f6240c", "record_id": "flaws_cloudtrail:0000544:50cdef45-4b5c-48aa-9235-afe4f1f6240c", "row_index": 544, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50cdef45-4b5c-48aa-9235-afe4f1f6240c", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c499137e1-4231-4a7e-9380-8b5c4f51052", "record_id": "flaws_cloudtrail:0000545:c499137e1-4231-4a7e-9380-8b5c4f51052", "row_index": 545, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c499137e1-4231-4a7e-9380-8b5c4f51052", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "778eb558-289b-4ed3-935f-7423dd5a2f70", "record_id": "flaws_cloudtrail:0000546:778eb558-289b-4ed3-935f-7423dd5a2f70", "row_index": 546, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "778eb558-289b-4ed3-935f-7423dd5a2f70", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "318d2a1a-417d-4b8d-865b-e5f45208c772", "record_id": "flaws_cloudtrail:0000547:318d2a1a-417d-4b8d-865b-e5f45208c772", "row_index": 547, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "318d2a1a-417d-4b8d-865b-e5f45208c772", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9af3b829-535d-4c6e-93a0-cf8d5c6e8547", "record_id": "flaws_cloudtrail:0000548:9af3b829-535d-4c6e-93a0-cf8d5c6e8547", "row_index": 548, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9af3b829-535d-4c6e-93a0-cf8d5c6e8547", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13e99b7d-8921-44a2-8f50-2ac6885b2c76", "record_id": "flaws_cloudtrail:0000549:13e99b7d-8921-44a2-8f50-2ac6885b2c76", "row_index": 549, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13e99b7d-8921-44a2-8f50-2ac6885b2c76", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d0030eb-36f4-4a9a-b758-5b800ac7a1c2", "record_id": "flaws_cloudtrail:0000550:3d0030eb-36f4-4a9a-b758-5b800ac7a1c2", "row_index": 550, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d0030eb-36f4-4a9a-b758-5b800ac7a1c2", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7544b13-2f31-43c4-a045-a634ab97bbc2", "record_id": "flaws_cloudtrail:0000551:e7544b13-2f31-43c4-a045-a634ab97bbc2", "row_index": 551, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7544b13-2f31-43c4-a045-a634ab97bbc2", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c481aa10-b6a9-4ae5-bedc-5be8db4af6db", "record_id": "flaws_cloudtrail:0000552:c481aa10-b6a9-4ae5-bedc-5be8db4af6db", "row_index": 552, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c481aa10-b6a9-4ae5-bedc-5be8db4af6db", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "121bf190-a494-42c8-acad-b0f715a88236", "record_id": "flaws_cloudtrail:0000553:121bf190-a494-42c8-acad-b0f715a88236", "row_index": 553, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "121bf190-a494-42c8-acad-b0f715a88236", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3904ebfb-bce4-44c6-93fb-cedb8efe057a", "record_id": "flaws_cloudtrail:0000554:3904ebfb-bce4-44c6-93fb-cedb8efe057a", "row_index": 554, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3904ebfb-bce4-44c6-93fb-cedb8efe057a", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c86d27df-3adb-4453-98b8-a8e025f344c5", "record_id": "flaws_cloudtrail:0000555:c86d27df-3adb-4453-98b8-a8e025f344c5", "row_index": 555, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c86d27df-3adb-4453-98b8-a8e025f344c5", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2e5abf3-304c-4606-9543-66a3a3cc0631", "record_id": "flaws_cloudtrail:0000556:c2e5abf3-304c-4606-9543-66a3a3cc0631", "row_index": 556, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2e5abf3-304c-4606-9543-66a3a3cc0631", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "725917e-0a76-489b-9c79-78d1c547899c", "record_id": "flaws_cloudtrail:0000557:725917e-0a76-489b-9c79-78d1c547899c", "row_index": 557, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "725917e-0a76-489b-9c79-78d1c547899c", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eca76e6b-0980-46a0-bf02-cae660d86854", "record_id": "flaws_cloudtrail:0000558:eca76e6b-0980-46a0-bf02-cae660d86854", "row_index": 558, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eca76e6b-0980-46a0-bf02-cae660d86854", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74bd0e5a-a96c-4c45-b159-e80d6df9050b", "record_id": "flaws_cloudtrail:0000559:74bd0e5a-a96c-4c45-b159-e80d6df9050b", "row_index": 559, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74bd0e5a-a96c-4c45-b159-e80d6df9050b", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4167af87-bb55-4cc5-8763-7d97fd6b6e5a", "record_id": "flaws_cloudtrail:0000560:4167af87-bb55-4cc5-8763-7d97fd6b6e5a", "row_index": 560, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4167af87-bb55-4cc5-8763-7d97fd6b6e5a", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd745129a-0919-4807-a91c-44aacd328284", "record_id": "flaws_cloudtrail:0000561:fd745129a-0919-4807-a91c-44aacd328284", "row_index": 561, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd745129a-0919-4807-a91c-44aacd328284", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a59725f-e387-408e-bb28-24f62b24d528", "record_id": "flaws_cloudtrail:0000562:7a59725f-e387-408e-bb28-24f62b24d528", "row_index": 562, "timestamp": "2019-07-08T15:43:48Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a59725f-e387-408e-bb28-24f62b24d528", "eventTime": "2019-07-08T15:43:48Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26943b1-f3fc-4ba6-8189-3cf44197ec68", "record_id": "flaws_cloudtrail:0000563:26943b1-f3fc-4ba6-8189-3cf44197ec68", "row_index": 563, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26943b1-f3fc-4ba6-8189-3cf44197ec68", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bbad88a-b23d-4291-8d4b-19f59548b8ca", "record_id": "flaws_cloudtrail:0000564:2bbad88a-b23d-4291-8d4b-19f59548b8ca", "row_index": 564, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bbad88a-b23d-4291-8d4b-19f59548b8ca", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f62b623-fe26-4d0b-9d81-4df9dc3be784", "record_id": "flaws_cloudtrail:0000565:2f62b623-fe26-4d0b-9d81-4df9dc3be784", "row_index": 565, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f62b623-fe26-4d0b-9d81-4df9dc3be784", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "042a12df-61d5-4bdf-abb3-79e3f9972aa6", "record_id": "flaws_cloudtrail:0000566:042a12df-61d5-4bdf-abb3-79e3f9972aa6", "row_index": 566, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "042a12df-61d5-4bdf-abb3-79e3f9972aa6", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b560b59-58e3-4c7d-b624-91d65f234d30", "record_id": "flaws_cloudtrail:0000567:4b560b59-58e3-4c7d-b624-91d65f234d30", "row_index": 567, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b560b59-58e3-4c7d-b624-91d65f234d30", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "378737-f52d-453a-9dff-d797aeb0fda9", "record_id": "flaws_cloudtrail:0000568:378737-f52d-453a-9dff-d797aeb0fda9", "row_index": 568, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "378737-f52d-453a-9dff-d797aeb0fda9", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a1b1998-329a-4066-9caa-d036bb57d489", "record_id": "flaws_cloudtrail:0000569:3a1b1998-329a-4066-9caa-d036bb57d489", "row_index": 569, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a1b1998-329a-4066-9caa-d036bb57d489", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb36b298-06a8-4994-a388-193b1929eca5", "record_id": "flaws_cloudtrail:0000570:cb36b298-06a8-4994-a388-193b1929eca5", "row_index": 570, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb36b298-06a8-4994-a388-193b1929eca5", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cb020a7-a5b6-44ca-8a46-bab54b7db66f", "record_id": "flaws_cloudtrail:0000571:9cb020a7-a5b6-44ca-8a46-bab54b7db66f", "row_index": 571, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cb020a7-a5b6-44ca-8a46-bab54b7db66f", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b731084-9704-473d-a101-cee2f67f0025", "record_id": "flaws_cloudtrail:0000572:b731084-9704-473d-a101-cee2f67f0025", "row_index": 572, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b731084-9704-473d-a101-cee2f67f0025", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c85139b-bad8-4473-9417-b1ee3d822b17", "record_id": "flaws_cloudtrail:0000573:1c85139b-bad8-4473-9417-b1ee3d822b17", "row_index": 573, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c85139b-bad8-4473-9417-b1ee3d822b17", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ead19fba-02d9-4fba-ba32-1ae9224f99c1", "record_id": "flaws_cloudtrail:0000574:ead19fba-02d9-4fba-ba32-1ae9224f99c1", "row_index": 574, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ead19fba-02d9-4fba-ba32-1ae9224f99c1", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cb19232-e1ec-4fa0-b8ad-4c957f77cca8", "record_id": "flaws_cloudtrail:0000575:3cb19232-e1ec-4fa0-b8ad-4c957f77cca8", "row_index": 575, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cb19232-e1ec-4fa0-b8ad-4c957f77cca8", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fc5a9e3-3d0d-4334-8c77-8cfc48ead708", "record_id": "flaws_cloudtrail:0000576:4fc5a9e3-3d0d-4334-8c77-8cfc48ead708", "row_index": 576, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fc5a9e3-3d0d-4334-8c77-8cfc48ead708", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26943b1-f3fc-4ba6-8189-3cf44197ec68", "record_id": "flaws_cloudtrail:0000577:26943b1-f3fc-4ba6-8189-3cf44197ec68", "row_index": 577, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26943b1-f3fc-4ba6-8189-3cf44197ec68", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bbad88a-b23d-4291-8d4b-19f59548b8ca", "record_id": "flaws_cloudtrail:0000578:2bbad88a-b23d-4291-8d4b-19f59548b8ca", "row_index": 578, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bbad88a-b23d-4291-8d4b-19f59548b8ca", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f62b623-fe26-4d0b-9d81-4df9dc3be784", "record_id": "flaws_cloudtrail:0000579:2f62b623-fe26-4d0b-9d81-4df9dc3be784", "row_index": 579, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f62b623-fe26-4d0b-9d81-4df9dc3be784", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "042a12df-61d5-4bdf-abb3-79e3f9972aa6", "record_id": "flaws_cloudtrail:0000580:042a12df-61d5-4bdf-abb3-79e3f9972aa6", "row_index": 580, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "042a12df-61d5-4bdf-abb3-79e3f9972aa6", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b560b59-58e3-4c7d-b624-91d65f234d30", "record_id": "flaws_cloudtrail:0000581:4b560b59-58e3-4c7d-b624-91d65f234d30", "row_index": 581, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b560b59-58e3-4c7d-b624-91d65f234d30", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "378737-f52d-453a-9dff-d797aeb0fda9", "record_id": "flaws_cloudtrail:0000582:378737-f52d-453a-9dff-d797aeb0fda9", "row_index": 582, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "378737-f52d-453a-9dff-d797aeb0fda9", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a1b1998-329a-4066-9caa-d036bb57d489", "record_id": "flaws_cloudtrail:0000583:3a1b1998-329a-4066-9caa-d036bb57d489", "row_index": 583, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a1b1998-329a-4066-9caa-d036bb57d489", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb36b298-06a8-4994-a388-193b1929eca5", "record_id": "flaws_cloudtrail:0000584:cb36b298-06a8-4994-a388-193b1929eca5", "row_index": 584, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb36b298-06a8-4994-a388-193b1929eca5", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cb020a7-a5b6-44ca-8a46-bab54b7db66f", "record_id": "flaws_cloudtrail:0000585:9cb020a7-a5b6-44ca-8a46-bab54b7db66f", "row_index": 585, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cb020a7-a5b6-44ca-8a46-bab54b7db66f", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b731084-9704-473d-a101-cee2f67f0025", "record_id": "flaws_cloudtrail:0000586:b731084-9704-473d-a101-cee2f67f0025", "row_index": 586, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b731084-9704-473d-a101-cee2f67f0025", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c85139b-bad8-4473-9417-b1ee3d822b17", "record_id": "flaws_cloudtrail:0000587:1c85139b-bad8-4473-9417-b1ee3d822b17", "row_index": 587, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c85139b-bad8-4473-9417-b1ee3d822b17", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ead19fba-02d9-4fba-ba32-1ae9224f99c1", "record_id": "flaws_cloudtrail:0000588:ead19fba-02d9-4fba-ba32-1ae9224f99c1", "row_index": 588, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ead19fba-02d9-4fba-ba32-1ae9224f99c1", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cb19232-e1ec-4fa0-b8ad-4c957f77cca8", "record_id": "flaws_cloudtrail:0000589:3cb19232-e1ec-4fa0-b8ad-4c957f77cca8", "row_index": 589, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cb19232-e1ec-4fa0-b8ad-4c957f77cca8", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fc5a9e3-3d0d-4334-8c77-8cfc48ead708", "record_id": "flaws_cloudtrail:0000590:4fc5a9e3-3d0d-4334-8c77-8cfc48ead708", "row_index": 590, "timestamp": "2019-07-08T15:43:49Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fc5a9e3-3d0d-4334-8c77-8cfc48ead708", "eventTime": "2019-07-08T15:43:49Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "878e0682-f4df-47e6-928e-be4cd27711a6", "record_id": "flaws_cloudtrail:0000591:878e0682-f4df-47e6-928e-be4cd27711a6", "row_index": 591, "timestamp": "2019-07-08T15:43:50Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "878e0682-f4df-47e6-928e-be4cd27711a6", "eventTime": "2019-07-08T15:43:50Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aa905e8-1ad6-4292-b416-c7a7d7dce874", "record_id": "flaws_cloudtrail:0000592:9aa905e8-1ad6-4292-b416-c7a7d7dce874", "row_index": 592, "timestamp": "2019-07-08T15:43:50Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aa905e8-1ad6-4292-b416-c7a7d7dce874", "eventTime": "2019-07-08T15:43:50Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b94b0cdd-baed-4c97-ae17-2e508466f0aa", "record_id": "flaws_cloudtrail:0000593:b94b0cdd-baed-4c97-ae17-2e508466f0aa", "row_index": 593, "timestamp": "2019-07-08T15:43:50Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b94b0cdd-baed-4c97-ae17-2e508466f0aa", "eventTime": "2019-07-08T15:43:50Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48473c-8b61-4bc2-acfb-1c7e4e040d22", "record_id": "flaws_cloudtrail:0000594:48473c-8b61-4bc2-acfb-1c7e4e040d22", "row_index": 594, "timestamp": "2019-07-08T15:43:50Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48473c-8b61-4bc2-acfb-1c7e4e040d22", "eventTime": "2019-07-08T15:43:50Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "117f65dc-6fe4-4a59-8c2b-606e2df1591c", "record_id": "flaws_cloudtrail:0000595:117f65dc-6fe4-4a59-8c2b-606e2df1591c", "row_index": 595, "timestamp": "2019-07-08T15:43:50Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "117f65dc-6fe4-4a59-8c2b-606e2df1591c", "eventTime": "2019-07-08T15:43:50Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b892f919-1d13-48fb-89f4-aa5c108012", "record_id": "flaws_cloudtrail:0000596:b892f919-1d13-48fb-89f4-aa5c108012", "row_index": 596, "timestamp": "2019-07-08T15:43:50Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b892f919-1d13-48fb-89f4-aa5c108012", "eventTime": "2019-07-08T15:43:50Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1441cb2-32c5-4e37-aade-e40c38673eb6", "record_id": "flaws_cloudtrail:0000597:c1441cb2-32c5-4e37-aade-e40c38673eb6", "row_index": 597, "timestamp": "2019-07-08T15:43:50Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1441cb2-32c5-4e37-aade-e40c38673eb6", "eventTime": "2019-07-08T15:43:50Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b747da3a-833d-4d47-9d7a-8884c10fb7d7", "record_id": "flaws_cloudtrail:0000598:b747da3a-833d-4d47-9d7a-8884c10fb7d7", "row_index": 598, "timestamp": "2019-07-08T15:43:50Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b747da3a-833d-4d47-9d7a-8884c10fb7d7", "eventTime": "2019-07-08T15:43:50Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "caa0159f-0a27-4b64-b927-057e20e549b5", "record_id": "flaws_cloudtrail:0000599:caa0159f-0a27-4b64-b927-057e20e549b5", "row_index": 599, "timestamp": "2019-07-08T15:43:50Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "caa0159f-0a27-4b64-b927-057e20e549b5", "eventTime": "2019-07-08T15:43:50Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0abaf2dc-21d0-473c-8a3a-709bc099d09a", "record_id": "flaws_cloudtrail:0000600:0abaf2dc-21d0-473c-8a3a-709bc099d09a", "row_index": 600, "timestamp": "2019-07-08T15:43:50Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0abaf2dc-21d0-473c-8a3a-709bc099d09a", "eventTime": "2019-07-08T15:43:50Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da1a7326-b181-48d3-bb42-8b092f50cf6f", "record_id": "flaws_cloudtrail:0000601:da1a7326-b181-48d3-bb42-8b092f50cf6f", "row_index": 601, "timestamp": "2019-07-08T15:43:50Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da1a7326-b181-48d3-bb42-8b092f50cf6f", "eventTime": "2019-07-08T15:43:50Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8df7c236-9d8b-48c7-b2c4-e1f09af21d80", "record_id": "flaws_cloudtrail:0000602:8df7c236-9d8b-48c7-b2c4-e1f09af21d80", "row_index": 602, "timestamp": "2019-07-08T15:43:50Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8df7c236-9d8b-48c7-b2c4-e1f09af21d80", "eventTime": "2019-07-08T15:43:50Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a71879-5735-4e9f-8efd-ef94afeabae0", "record_id": "flaws_cloudtrail:0000603:a71879-5735-4e9f-8efd-ef94afeabae0", "row_index": 603, "timestamp": "2019-07-08T15:43:50Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a71879-5735-4e9f-8efd-ef94afeabae0", "eventTime": "2019-07-08T15:43:50Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8649d39c-99f0-4415-bd69-61df896c5ae3", "record_id": "flaws_cloudtrail:0000604:8649d39c-99f0-4415-bd69-61df896c5ae3", "row_index": 604, "timestamp": "2019-07-08T15:43:50Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8649d39c-99f0-4415-bd69-61df896c5ae3", "eventTime": "2019-07-08T15:43:50Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cc591eb-3e35-4c6b-97f9-aa225525db21", "record_id": "flaws_cloudtrail:0000605:0cc591eb-3e35-4c6b-97f9-aa225525db21", "row_index": 605, "timestamp": "2019-07-08T15:43:50Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "251.209.251.231", "user_agent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cc591eb-3e35-4c6b-97f9-aa225525db21", "eventTime": "2019-07-08T15:43:50Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.209.251.231", "userAgent": "Boto3/1.9.183 Python/3.6.8 Linux/3.10.0-957.21.3.el7.x86_64 Botocore/1.12.183", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}