Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM credential appears to have been reused from an unfamiliar client, with a brief identity check followed by broad account discovery and a privileged change. Identify the responsible principal, the MITRE ATT&CK technique that best fits the activity, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03fdad4c-3a46-4d74-8c67-1205b6f82740", "record_id": "flaws_cloudtrail:0000000:03fdad4c-3a46-4d74-8c67-1205b6f82740", "row_index": 0, "timestamp": "2017-05-27T05:07:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03fdad4c-3a46-4d74-8c67-1205b6f82740", "eventTime": "2017-05-27T05:07:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAV88JP4IG4I5P6JC8", "expiration": "May 27, 2017 6:07:05 AM", "sessionToken": "FQoDYXdzECYaDBDMtQSl84WMSn6B5iLMAapT+qQXv3JCpoka9jkGOfvKOsdBgC33+hI8onbJpnLDtFR9rQN2Rth5OirWxp+TMLEX1fUXA/o54a2AYNYOht/P6B/7Ng8drTP8S/R3eEuXfeQ/o6z7PFBkY57CR3sT+i6X8qn09DOgqQYbu0vELIZFI1YxE5KUJgEOnNCpxDok0vvrOCYSdNmfYrARPlDTFIPhWdqIkcUS6IrLYudqthWO45WhfOZG4qGzdxKQocFyiOCRK02RzG1phN/cFibVs3uKUr5XtI4KkV0o5yj5kqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25708-5d8f-4115-b09a-951bd1062c1d", "record_id": "flaws_cloudtrail:0000001:25708-5d8f-4115-b09a-951bd1062c1d", "row_index": 1, "timestamp": "2017-05-27T05:07:06Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV88JP4IG4I5P6JC8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 999, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25708-5d8f-4115-b09a-951bd1062c1d", "eventTime": "2017-05-27T05:07:06Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV88JP4IG4I5P6JC8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f997e4c-b116-4b4b-9c9a-b775abe4afff", "record_id": "flaws_cloudtrail:0000002:1f997e4c-b116-4b4b-9c9a-b775abe4afff", "row_index": 2, "timestamp": "2017-05-27T05:07:06Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f997e4c-b116-4b4b-9c9a-b775abe4afff", "eventTime": "2017-05-27T05:07:06Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8O8UCN0M35AV604C", "expiration": "May 27, 2017 6:07:06 AM", "sessionToken": "FQoDYXdzECYaDMaJEStHqE97vF0EwSLMAXbimjim8kEgjJWhtOM51ii9iKwyg9aPnmEhRrTqAu/D7ziz8UtGr7cvIYyup/eHK+qhn9dInyTFMVKfhzWD9nrJcMrRbRE1FqyNpvm2OwDqdkYx0edOF0Du5mtc9AFleKLHGIgK6M021pIS8ksTMabMgu9kyNSEc3S5MYmGVirVnoAA2OUOpxU/E4S08MTBDxqxIjMvJD4Ne2Ug6o1SjRq4EnP4mbEC9TmyatAERdKqQjd02aNWZwAQBZ+S3rj7dqdtOPHCVFD7sOFXTyj6kqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1598f215-5407-44a4-accb-f19f0ffade31", "record_id": "flaws_cloudtrail:0000003:1598f215-5407-44a4-accb-f19f0ffade31", "row_index": 3, "timestamp": "2017-05-27T05:07:06Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8O8UCN0M35AV604C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1598f215-5407-44a4-accb-f19f0ffade31", "eventTime": "2017-05-27T05:07:06Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8O8UCN0M35AV604C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d49158d-a4c6-446c-a411-785b71d1e120", "record_id": "flaws_cloudtrail:0000004:d49158d-a4c6-446c-a411-785b71d1e120", "row_index": 4, "timestamp": "2017-05-27T05:07:07Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d49158d-a4c6-446c-a411-785b71d1e120", "eventTime": "2017-05-27T05:07:07Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1TQ1N8V4YTHY83G5", "expiration": "May 27, 2017 6:07:07 AM", "sessionToken": "FQoDYXdzECYaDF8KfURrh6BMoYWvFSLMAbDrZRNiSjcNW24ntF5e1Upa+UU1oitThIReMOWC+E2pmpBcIdCQUR/t6JO5tWXZlWF6iJSdh4mJV83r+oSUX3ePL5RdfGEqSkCEJcxp7fPmM4LFCSrrZvahtF5QnqXI4/UznNJOdjUAPyTzf6uLJtCB4P5Jc7k6RNZLnwnhznbkgpnmN+oTpVQGb5A4xvV47PsdPYFfgRCyl+P3ec2uPNEmCas186YPV3nxNS4H3EhGhHI0fxIqUaOmKljnB9oeq25FpnhGiPyBYQSLFCj7kqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bed562658-a763-4288-927d-f85e3a1ebdbf", "record_id": "flaws_cloudtrail:0000005:bed562658-a763-4288-927d-f85e3a1ebdbf", "row_index": 5, "timestamp": "2017-05-27T05:07:07Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1TQ1N8V4YTHY83G5", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bed562658-a763-4288-927d-f85e3a1ebdbf", "eventTime": "2017-05-27T05:07:07Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1TQ1N8V4YTHY83G5", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:07Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b8d8e0f-74ba-4fbf-87aa-e5eaba059dc9", "record_id": "flaws_cloudtrail:0000006:3b8d8e0f-74ba-4fbf-87aa-e5eaba059dc9", "row_index": 6, "timestamp": "2017-05-27T05:07:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b8d8e0f-74ba-4fbf-87aa-e5eaba059dc9", "eventTime": "2017-05-27T05:07:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAK6EIE4OTVX4JXSMO", "expiration": "May 27, 2017 6:07:08 AM", "sessionToken": "FQoDYXdzECYaDGxXfEDNNeof7p3bbiLMAbl5KrDOB6kgx7DLYgK9XLxTCiTecyBbhuq5P3kK0sJ2oU5Cy0c3MLVK0qH6JYOdi6XnVnCvQ/KcXXEbhO04yKNEksQ87iSLjn7bzSKpq09Dvgvx6QJXbHLNaXwfzHG4kSzGCnkWT/wEPmInMfIY0T1aATzq0fz2GuY5hSUViX/KeRm8lb/UfAOQRu1BZUGmB3YWsfFzorlaYantJEo5vVSkdR/NjI0fzRkEjrx0eSvRzmG/HgnapizyilJlEn4lwFp1GMaaDgUccVXncSj8kqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b71044d5-abc2-43ed-8d30-1624c6da98f8", "record_id": "flaws_cloudtrail:0000007:b71044d5-abc2-43ed-8d30-1624c6da98f8", "row_index": 7, "timestamp": "2017-05-27T05:07:09Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAK6EIE4OTVX4JXSMO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b71044d5-abc2-43ed-8d30-1624c6da98f8", "eventTime": "2017-05-27T05:07:09Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAK6EIE4OTVX4JXSMO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e755b46b-df9c-4140-aadb-88a55dbf722d", "record_id": "flaws_cloudtrail:0000008:e755b46b-df9c-4140-aadb-88a55dbf722d", "row_index": 8, "timestamp": "2017-05-27T05:07:09Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e755b46b-df9c-4140-aadb-88a55dbf722d", "eventTime": "2017-05-27T05:07:09Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA480ZDUYRQPYS6GUF", "expiration": "May 27, 2017 6:07:09 AM", "sessionToken": "FQoDYXdzECYaDDe410VfmM743//0TSLMARfWeO7xFyemdC7GSOHTVgUiFtF9e/QGxl836GKOe9z1KE66wwoIoEy65KGQTY6JBA79mtqMJqiurgRP9hr6SGVTHVbbti3wAzVzmU94/cZzqb5uKDp3uuhxILVSs9t2GJKju6M0ZUnHeW2gVv63FDYe7eNu6QIOkHFJ27mLnE95SoDTpQI/1w+hngHLYSkC8WvFpbkW+/QjCnh91Veo1q+iPKLsQ0ka5wiCYrm4eCR0TwW6Np3WmZbuWs8tVPO2Zho6AbMqRJwaqCfQpyj9kqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52e4f6f8-4c5e-44e1-8f49-9164c265dbab", "record_id": "flaws_cloudtrail:0000009:52e4f6f8-4c5e-44e1-8f49-9164c265dbab", "row_index": 9, "timestamp": "2017-05-27T05:07:10Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA480ZDUYRQPYS6GUF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52e4f6f8-4c5e-44e1-8f49-9164c265dbab", "eventTime": "2017-05-27T05:07:10Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA480ZDUYRQPYS6GUF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:09Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bac1764a-953a-4c76-b93f-18855d22443b", "record_id": "flaws_cloudtrail:0000010:bac1764a-953a-4c76-b93f-18855d22443b", "row_index": 10, "timestamp": "2017-05-27T05:07:10Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bac1764a-953a-4c76-b93f-18855d22443b", "eventTime": "2017-05-27T05:07:10Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4DYUXJP084WCMVP7", "expiration": "May 27, 2017 6:07:10 AM", "sessionToken": "FQoDYXdzECYaDDXC+0C82oczbPTvliLMAVrgSnc89CRUcvG+lXtmWnJz6pYh51W2UEvbU8t41bGCqboeoXMj2lEkA0VqMOufwrPcNV5K75d9ZOr6kdaQ8j8Phj1kZZA+UBlyjljUp6j3o0N0S55+xNGaO0Ing2lE9j2Od03c1atKBnbk40TVyAOeSlhVUfXBQQPr4uBVT3YJg8ZuokaNkhuLZBYfmYhXgSfPm43L05T6cxmHR6o+TNmAeivvDOp73QqRe8yyUQkORqBMqr4cZcaGHz0ffzHPcN8sgDRB5Ny6UjSkayj+kqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2027c618-3b96-4088-964d-bdb47c218142", "record_id": "flaws_cloudtrail:0000011:2027c618-3b96-4088-964d-bdb47c218142", "row_index": 11, "timestamp": "2017-05-27T05:07:11Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4DYUXJP084WCMVP7", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2027c618-3b96-4088-964d-bdb47c218142", "eventTime": "2017-05-27T05:07:11Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4DYUXJP084WCMVP7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1cf4b03-f651-4adb-bcf0-f3946bcc61dd", "record_id": "flaws_cloudtrail:0000012:c1cf4b03-f651-4adb-bcf0-f3946bcc61dd", "row_index": 12, "timestamp": "2017-05-27T05:07:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1cf4b03-f651-4adb-bcf0-f3946bcc61dd", "eventTime": "2017-05-27T05:07:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIARCTE0XCH17FSW3SO", "expiration": "May 27, 2017 6:07:12 AM", "sessionToken": "FQoDYXdzECYaDJZR/j7oRAoc/XLvnSLMAYz1fAD7Fzj9dRayIsGDIB/pKyd0L5Hnq3Q/CXfWiwl4sdf9B08DPyCsPWJCyonc9apQN3JwvVcC6SqFw87BxKUDEfEuvO+0B+IN6YCBEuFucuVGQkciyxooL1TW4qs7CD2oLGvYENkg0L7xHc1hn1X9of2K0IIbLDomBoh05P7h4mbMffCvcKAY4PzALZgZg67LMYeQLUAGVWylh4gO3BWnbRvi/bAVF21bVner6POkpYxw67GxGqkkkZpEaNw4jMbQnsGinSYjd47j6CiAk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df026f86-81c3-498c-8226-df6ff8ebc6e3", "record_id": "flaws_cloudtrail:0000013:df026f86-81c3-498c-8226-df6ff8ebc6e3", "row_index": 13, "timestamp": "2017-05-27T05:07:13Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARCTE0XCH17FSW3SO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df026f86-81c3-498c-8226-df6ff8ebc6e3", "eventTime": "2017-05-27T05:07:13Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARCTE0XCH17FSW3SO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b32c9da-ba21-4375-8e82-da6a7d79266", "record_id": "flaws_cloudtrail:0000014:8b32c9da-ba21-4375-8e82-da6a7d79266", "row_index": 14, "timestamp": "2017-05-27T05:07:13Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b32c9da-ba21-4375-8e82-da6a7d79266", "eventTime": "2017-05-27T05:07:13Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3AK8DSSJHZGQA5K5", "expiration": "May 27, 2017 6:07:13 AM", "sessionToken": "FQoDYXdzECYaDKWLheu3MvuHX5E9iCLMAUzn90quKB4gleme5Yu4hHRVcnQhU8+ydS476b4GLutnbPqY9ICIQ+sKAJV+3yVh/zfSnDODXkqpjzGubW9qbTDbrtvuAk4yTOsOTvb7HE/8r8I3+2IjAgA7ntgHTcxcoWfN5zanqpRI6jZjiTHCT48ZyIf+uYKL9kNjDgmDP0KSfmy5TRlsqeZQ+NL9EJxk9WeGWOd9Ryv7paG7dBLHXGzhp90RABeyIMCOnYFWVX282l54Rk/xfv4nTn1kurHffZAON3+X4aw5Ns9JcyiBk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb78bdef-9d29-4253-8be0-72efef3ff3ad", "record_id": "flaws_cloudtrail:0000015:cb78bdef-9d29-4253-8be0-72efef3ff3ad", "row_index": 15, "timestamp": "2017-05-27T05:07:14Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb78bdef-9d29-4253-8be0-72efef3ff3ad", "eventTime": "2017-05-27T05:07:14Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQTGXEEE7Y4MHPW8O", "expiration": "May 27, 2017 6:07:14 AM", "sessionToken": "FQoDYXdzECYaDF0tthJyu11+aQNV0CLMATqY8B7Ll6WnfaKSybqi9QrEdBul/xelzzv7FWIKHCo9LqpUOg0ZuEQb+i/OYhm94HJw/mSRdBshH1CXh0cKL/4O7YRAvyYcYP6ot+j1SXt7X4/p0J/i43aRBZouXT1roE5hygZ76Gh9Pb7HLEm6Y/XsefWeAKzRICDtSREUG68llq0aCDOOW0ukWkxmaET0Yt7MsK/V3LDWNT40Q1moeyntQ7oEJ/ZUCTfStY1C8IAIfCNm6+aQIzNYRU8qsEbCzGS+vaqofNzdAajGvSiCk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f58df6b-a5a9-4ee9-8100-a722fe2d4997", "record_id": "flaws_cloudtrail:0000016:1f58df6b-a5a9-4ee9-8100-a722fe2d4997", "row_index": 16, "timestamp": "2017-05-27T05:07:14Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3AK8DSSJHZGQA5K5", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1021, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f58df6b-a5a9-4ee9-8100-a722fe2d4997", "eventTime": "2017-05-27T05:07:14Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3AK8DSSJHZGQA5K5", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:13Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58bfbcbe-78ab-4e88-ada8-d8e2cd408a79", "record_id": "flaws_cloudtrail:0000017:58bfbcbe-78ab-4e88-ada8-d8e2cd408a79", "row_index": 17, "timestamp": "2017-05-27T05:07:15Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQTGXEEE7Y4MHPW8O", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58bfbcbe-78ab-4e88-ada8-d8e2cd408a79", "eventTime": "2017-05-27T05:07:15Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQTGXEEE7Y4MHPW8O", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:14Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "457550-aa47-44ac-b392-e40fcb56d328", "record_id": "flaws_cloudtrail:0000018:457550-aa47-44ac-b392-e40fcb56d328", "row_index": 18, "timestamp": "2017-05-27T05:07:16Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA2BD41C0FL4EY7OHY", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "457550-aa47-44ac-b392-e40fcb56d328", "eventTime": "2017-05-27T05:07:16Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA2BD41C0FL4EY7OHY", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:16Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f47f591-1256-4516-849c-89ddee825e35", "record_id": "flaws_cloudtrail:0000019:3f47f591-1256-4516-849c-89ddee825e35", "row_index": 19, "timestamp": "2017-05-27T05:07:16Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1448, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f47f591-1256-4516-849c-89ddee825e35", "eventTime": "2017-05-27T05:07:16Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2BD41C0FL4EY7OHY", "expiration": "May 27, 2017 6:07:16 AM", "sessionToken": "FQoDYXdzECYaDFOvoevnOOVWGo09jyLMAaB54c+RuxnKd/GOYuctwXxV6WjPxIzyxMuGVPvSO6jyRaehLlpJ9bhiAZqoUOsj1JL/xYUhs+NnguCYt/TzvmXqGDq5vYtHiOL+SN7JZnZh1refqn4ml2SDLxJQzjaxduj9s5CyDAi9cTeTpfES5IkfP+e+dvyrqPw4MtZEEGaJ7Net832QtRf8IuQBJO34DbUe6nLqjdDxzhazxkJADQLvhQXOH45UO0y1ZNeTBDBqVu95C8WpdFr83ZExH73ScLWuXSkAsysqmoocnCiEk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c48b46b7-38e7-4095-8180-355d0690f068", "record_id": "flaws_cloudtrail:0000020:c48b46b7-38e7-4095-8180-355d0690f068", "row_index": 20, "timestamp": "2017-05-27T05:07:17Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c48b46b7-38e7-4095-8180-355d0690f068", "eventTime": "2017-05-27T05:07:17Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJSO3KQFU6HBEK4Z7", "expiration": "May 27, 2017 6:07:17 AM", "sessionToken": "FQoDYXdzECYaDJZ4p9LwCl5C/6OPNyLMAdGjmcGK16IKfkALghH8dnZCCjkkxZZ9Nu5nPkzz1VX91ch6tBzfvAunBX/DvXIG4a2yOeLUljGvYS119CttRtx1v1hnTk3gd0YBJEA+/xvwY6Z3Y06kJsrGSMZaW7JIuVU3k2V7/pRJy7neNwDRVE4kmtrAzwvxupdr/3yGxy6beXpr2Wobt4PcnRTNHECpnJptUjyM9tvB5zRLV47+c1xfoBv23rVTqJoH69wjmrkSZeqFwdqTwhdezT2c7S8JvyRhv3ox+DdynVRkQCiFk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a4c295f-5a49-4fcd-bdb2-83d4fc1b7fc9", "record_id": "flaws_cloudtrail:0000021:1a4c295f-5a49-4fcd-bdb2-83d4fc1b7fc9", "row_index": 21, "timestamp": "2017-05-27T05:07:18Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a4c295f-5a49-4fcd-bdb2-83d4fc1b7fc9", "eventTime": "2017-05-27T05:07:18Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZ2SBAD7ISIV1FHWQ", "expiration": "May 27, 2017 6:07:18 AM", "sessionToken": "FQoDYXdzECYaDMPQa4nRLW546jPlkSLMAUHEwHOObr12V4rlgqPCJ6Kfu5q0PYDqp/hHRFlmWn4Qfqn6axN8RdWUUiNgSiYZA/WfXbeNI1H/FILoxjTgN0dfJrRaL7s5uopTFISxqNcqbmaf9BgB5W0SB+2s5AD9Cw3MIMuS+MobwH8MQz4P6+HR3mcOQp+/zAXcAq2STWim8y4Sceb/JN3st/MOEwrbZgVVXsg5jPaTT8OAiXGyNTuV63QlZH3l2impce7gXlIblsViQ7P0h4J5G/rKDmXuc0W0oOXkI0vhJ5YzCSiGk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49151-3a0a-4939-9a5d-1b5c8f95bfc8", "record_id": "flaws_cloudtrail:0000022:49151-3a0a-4939-9a5d-1b5c8f95bfc8", "row_index": 22, "timestamp": "2017-05-27T05:07:19Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49151-3a0a-4939-9a5d-1b5c8f95bfc8", "eventTime": "2017-05-27T05:07:19Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMKDHO45ZR6AFWMY6", "expiration": "May 27, 2017 6:07:19 AM", "sessionToken": "FQoDYXdzECYaDFhSdwwXvlYJCQaq3yLMAfT3e2cz/gMHNR5L4IZAVZKuio9rf0kcJlJs9iXkk2XVKxkrK04BPEqowUXs7MS5dBAJXaNB0cVnfTp8ZCmcUc01lx1Ji9Isn0+rN2cyNb5+WbQEVu2wkpAshnIZiINsBHPKHNTbjt49eVqt73EawQJ+J+IQr15J/w/XIHpvLWVxSEpSKU35E02uUzFC+2EmDorxkxYru+a9PxZwXN0OYEjIRsQTAS5fc5lzrXTqX1roaLbvuqZH/Y+zLXeaSxCVvn0M0pF7mFzmTSGT7iiHk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "694e3b60-41ea-4587-a075-18939eece23", "record_id": "flaws_cloudtrail:0000023:694e3b60-41ea-4587-a075-18939eece23", "row_index": 23, "timestamp": "2017-05-27T05:07:19Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAZ2SBAD7ISIV1FHWQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "694e3b60-41ea-4587-a075-18939eece23", "eventTime": "2017-05-27T05:07:19Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAZ2SBAD7ISIV1FHWQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1cc7dc9-6679-4439-b326-6fdcccc7f240", "record_id": "flaws_cloudtrail:0000024:d1cc7dc9-6679-4439-b326-6fdcccc7f240", "row_index": 24, "timestamp": "2017-05-27T05:07:20Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1448, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1cc7dc9-6679-4439-b326-6fdcccc7f240", "eventTime": "2017-05-27T05:07:20Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIABJXIB8LGOJOL263E", "expiration": "May 27, 2017 6:07:20 AM", "sessionToken": "FQoDYXdzECYaDEJVtobbMj1uwErAHiLMAQ646kbZEhATNxt59Yp/TAS+JJUjvwNcLYDW4Lo7kjV/aiOcrEhI7W47iM3jU39Vpa8z694r3lUs2Xhr2Hnq427A4YNFJGzw68IdlZ3cR1wg7z2QCNzXB2MT9iyG0v730ikiul9LprKQil2IDqS8YEDG3I7SPULYwYZdzOIYLZSo3WNzvamVVHLVJ/YmRkV6Sq4MRQppZCFltdwXl6VXD4U9az2AtvJCgPL3rPLq+JNUndzF3Yo0ZQYWbCliKuIEDnSlcenPbHAVPA8dGSiIk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4af2f5c0-5c7b-437c-abd7-326b388202a", "record_id": "flaws_cloudtrail:0000025:4af2f5c0-5c7b-437c-abd7-326b388202a", "row_index": 25, "timestamp": "2017-05-27T05:07:21Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABJXIB8LGOJOL263E", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4af2f5c0-5c7b-437c-abd7-326b388202a", "eventTime": "2017-05-27T05:07:21Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABJXIB8LGOJOL263E", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:20Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11c08543-7eba-4084-830f-c3943783b466", "record_id": "flaws_cloudtrail:0000026:11c08543-7eba-4084-830f-c3943783b466", "row_index": 26, "timestamp": "2017-05-27T05:07:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11c08543-7eba-4084-830f-c3943783b466", "eventTime": "2017-05-27T05:07:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7H10M7RMJTBH4PPL", "expiration": "May 27, 2017 6:07:22 AM", "sessionToken": "FQoDYXdzECYaDKKP4K08jIJ/ilI7iiLMAeH/RGUMrqnghT9hCp6RW4KA0J2VrBoNv1410HGj4vmiGSHL8AdRHuineV7lywzMul44OJFxJPyLg1zqdyLKpfF/TrSMk1jTGeA0cCvXIIwXmwGCrYAUHio8vHuia8EDtHHG4MY5YFky0pMBB+Z6aNFeHk5XVfA7pnE7aSx6V9dxgGpHDyKWQ0g7gRgty+DeSFvycWGV24aCiZCHw7CoVvRDDM2VexcxsU7gzZtGmtow/+VmepSEmkjsmVW19nimS65Yr/4QKZFBiKSzRCiKk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "454914e88-9b97-42f4-a33e-d95b52b5dc42", "record_id": "flaws_cloudtrail:0000027:454914e88-9b97-42f4-a33e-d95b52b5dc42", "row_index": 27, "timestamp": "2017-05-27T05:07:23Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA7H10M7RMJTBH4PPL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "454914e88-9b97-42f4-a33e-d95b52b5dc42", "eventTime": "2017-05-27T05:07:23Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA7H10M7RMJTBH4PPL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "375a732a-f9a4-4db2-94c4-ac96d23841", "record_id": "flaws_cloudtrail:0000028:375a732a-f9a4-4db2-94c4-ac96d23841", "row_index": 28, "timestamp": "2017-05-27T05:07:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "375a732a-f9a4-4db2-94c4-ac96d23841", "eventTime": "2017-05-27T05:07:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIANEQ084N5HCRA4HTS", "expiration": "May 27, 2017 6:07:23 AM", "sessionToken": "FQoDYXdzECYaDNa91oafHxpTuWlWWSLMAT7exhya0t/TcLe3eHk8sZLTVLL1OFIH8rseBm4v2BSkfSAGwy5hCxBu/SIPQvJTUpPkHd5Z0CCC4jB+lF0frN1IAUV3ly+0MtKIL+kDNyzQw55jZy9JPzJwdg7dbEYAF1wJv5c6W5tG/wMf+McpRknK4qtDheXanHt62OuZ5I0H2PV7CwX8g9lkyVbgL1q79bDP4of6YziJ3TPyQc2VQoXz+pqfsQqZ1gA2jl6KxNUlQiNDKBgpGHnr2yaEjufFs50PyvVqsD2UY9E36yiLk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3a5610f-303d-4e8c-b8fc-9d1da42000a7", "record_id": "flaws_cloudtrail:0000029:c3a5610f-303d-4e8c-b8fc-9d1da42000a7", "row_index": 29, "timestamp": "2017-05-27T05:07:24Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIANEQ084N5HCRA4HTS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3a5610f-303d-4e8c-b8fc-9d1da42000a7", "eventTime": "2017-05-27T05:07:24Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIANEQ084N5HCRA4HTS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81f8705d-31b6-4fcf-937b-206f84a5d4a5", "record_id": "flaws_cloudtrail:0000030:81f8705d-31b6-4fcf-937b-206f84a5d4a5", "row_index": 30, "timestamp": "2017-05-27T05:07:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81f8705d-31b6-4fcf-937b-206f84a5d4a5", "eventTime": "2017-05-27T05:07:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAS3N8XCODR8MVNXJU", "expiration": "May 27, 2017 6:07:24 AM", "sessionToken": "FQoDYXdzECYaDEez2unA4CePuLldmyLMAb+uCDdj/IPRM+XXMLsOll/Dv42R/yUI5VKc2+cWplHgXDFg4M3EQDxxe0U07TCVqtEfkkAt0+W19oDVwlfv60JYgVr445yB9mzmWjJwqAIQlXM1+6mqwrIT1Ft2UbPKjm41ch62hFtLTfVnf74X/gjvOpTamT9RBO8joATXO99JPqJ7VE8S/m0YJCBszJ6b38zNCL6Mxha+wD84bhVKNTrt++6SznaoCY0oStQMpepCtmbfXuGWmHn5i4AsfSU7WBTp8L658Mo4uRywyCiMk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35bfe0de-8825-428d-8f30-d0c19af1f302", "record_id": "flaws_cloudtrail:0000031:35bfe0de-8825-428d-8f30-d0c19af1f302", "row_index": 31, "timestamp": "2017-05-27T05:07:25Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAS3N8XCODR8MVNXJU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35bfe0de-8825-428d-8f30-d0c19af1f302", "eventTime": "2017-05-27T05:07:25Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAS3N8XCODR8MVNXJU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:24Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38ea09e5-6c39-425b-b903-26dcea74c58f", "record_id": "flaws_cloudtrail:0000032:38ea09e5-6c39-425b-b903-26dcea74c58f", "row_index": 32, "timestamp": "2017-05-27T05:07:25Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAGAPQIWDQ4UVWUCNZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38ea09e5-6c39-425b-b903-26dcea74c58f", "eventTime": "2017-05-27T05:07:25Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAGAPQIWDQ4UVWUCNZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:05:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "responseElements": {"sAMLProviderList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb4f8bb4-7b89-48cd-a648-df33f5e64473", "record_id": "flaws_cloudtrail:0000033:eb4f8bb4-7b89-48cd-a648-df33f5e64473", "row_index": 33, "timestamp": "2017-05-27T05:07:26Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb4f8bb4-7b89-48cd-a648-df33f5e64473", "eventTime": "2017-05-27T05:07:26Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9ORL38REE9WRG0C2", "expiration": "May 27, 2017 6:07:26 AM", "sessionToken": "FQoDYXdzECYaDDKWMpyqVn1lt4JvDiLMAd+lLX/j1l181p6eA+4e73+lDCO1lwW+2usHFDpczWLdpxHIGLcITL+MX8LXhgnDgaIOXMJp7/4WAr3rJdqgQ2NDYXt1AhK3ExC/Ulxx7cHl0QVBxKdqFncfjqhKVfVUHP8dtYx0Crp8YNGPnoZgv7a4IKlP0mEE8ZK0MjRTJjeSd/12SRDqbQ4e5yGSf4T94JH30UGVV+PPR1TrfPx50svYBWu0BmMbLqaayR5gfzEbuv/CeMkJcNy2ZlHrk2HIIxfPksvh/gduLjAAeyiOk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "611229a8-1491-4f98-8c6b-f288a380f7d5", "record_id": "flaws_cloudtrail:0000034:611229a8-1491-4f98-8c6b-f288a380f7d5", "row_index": 34, "timestamp": "2017-05-27T05:07:26Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9ORL38REE9WRG0C2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "611229a8-1491-4f98-8c6b-f288a380f7d5", "eventTime": "2017-05-27T05:07:26Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9ORL38REE9WRG0C2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:26Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"pathPrefix": "/"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05665f51-25fd-4e59-bd34-77a99e762007c", "record_id": "flaws_cloudtrail:0000035:05665f51-25fd-4e59-bd34-77a99e762007c", "row_index": 35, "timestamp": "2017-05-27T05:07:26Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAGAPQIWDQ4UVWUCNZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05665f51-25fd-4e59-bd34-77a99e762007c", "eventTime": "2017-05-27T05:07:26Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAGAPQIWDQ4UVWUCNZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:05:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6ac0027-4aa7-4c44-84ce-7532dbfbc895", "record_id": "flaws_cloudtrail:0000036:b6ac0027-4aa7-4c44-84ce-7532dbfbc895", "row_index": 36, "timestamp": "2017-05-27T05:07:26Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAGAPQIWDQ4UVWUCNZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6ac0027-4aa7-4c44-84ce-7532dbfbc895", "eventTime": "2017-05-27T05:07:26Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAGAPQIWDQ4UVWUCNZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:05:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51d51a00-5637-469d-88cd-9e5c3e1da220", "record_id": "flaws_cloudtrail:0000037:51d51a00-5637-469d-88cd-9e5c3e1da220", "row_index": 37, "timestamp": "2017-05-27T05:07:26Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAGAPQIWDQ4UVWUCNZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 960, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51d51a00-5637-469d-88cd-9e5c3e1da220", "eventTime": "2017-05-27T05:07:26Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAGAPQIWDQ4UVWUCNZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:05:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ee3db56-ae10-4c53-94cf-df096b9ebf37", "record_id": "flaws_cloudtrail:0000038:5ee3db56-ae10-4c53-94cf-df096b9ebf37", "row_index": 38, "timestamp": "2017-05-27T05:07:26Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAGAPQIWDQ4UVWUCNZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ee3db56-ae10-4c53-94cf-df096b9ebf37", "eventTime": "2017-05-27T05:07:26Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAGAPQIWDQ4UVWUCNZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:05:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "816d8caf-6384-442a-a01e-9e03dba33170", "record_id": "flaws_cloudtrail:0000039:816d8caf-6384-442a-a01e-9e03dba33170", "row_index": 39, "timestamp": "2017-05-27T05:07:26Z", "event_type": "GetRolePolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAGAPQIWDQ4UVWUCNZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1018, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "816d8caf-6384-442a-a01e-9e03dba33170", "eventTime": "2017-05-27T05:07:26Z", "eventName": "GetRolePolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAGAPQIWDQ4UVWUCNZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:05:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyName": "read_level_6_bucket", "roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ac596394-ce96-493a-ac63-ec884904a", "record_id": "flaws_cloudtrail:0000040:6ac596394-ce96-493a-ac63-ec884904a", "row_index": 40, "timestamp": "2017-05-27T05:07:27Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAGAPQIWDQ4UVWUCNZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ac596394-ce96-493a-ac63-ec884904a", "eventTime": "2017-05-27T05:07:27Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAGAPQIWDQ4UVWUCNZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:05:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "643b7d50-622e-412f-99b3-716125d0ac4", "record_id": "flaws_cloudtrail:0000041:643b7d50-622e-412f-99b3-716125d0ac4", "row_index": 41, "timestamp": "2017-05-27T05:07:27Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAGAPQIWDQ4UVWUCNZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "643b7d50-622e-412f-99b3-716125d0ac4", "eventTime": "2017-05-27T05:07:27Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAGAPQIWDQ4UVWUCNZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:05:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44597a66-7e6d-4a30-840a-3ab038e57c0b", "record_id": "flaws_cloudtrail:0000042:44597a66-7e6d-4a30-840a-3ab038e57c0b", "row_index": 42, "timestamp": "2017-05-27T05:07:27Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAGAPQIWDQ4UVWUCNZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44597a66-7e6d-4a30-840a-3ab038e57c0b", "eventTime": "2017-05-27T05:07:27Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAGAPQIWDQ4UVWUCNZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:05:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "047ad9e0-fb33-4e86-aa65-8cf50ded2214", "record_id": "flaws_cloudtrail:0000043:047ad9e0-fb33-4e86-aa65-8cf50ded2214", "row_index": 43, "timestamp": "2017-05-27T05:07:27Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAGAPQIWDQ4UVWUCNZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "047ad9e0-fb33-4e86-aa65-8cf50ded2214", "eventTime": "2017-05-27T05:07:27Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAGAPQIWDQ4UVWUCNZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:05:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e627562-f047-4b24-ae85-473e7ef38a2a", "record_id": "flaws_cloudtrail:0000044:e627562-f047-4b24-ae85-473e7ef38a2a", "row_index": 44, "timestamp": "2017-05-27T05:07:27Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAGAPQIWDQ4UVWUCNZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e627562-f047-4b24-ae85-473e7ef38a2a", "eventTime": "2017-05-27T05:07:27Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAGAPQIWDQ4UVWUCNZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:05:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "178e0f9e-a392-4920-b95c-60b91ebc0ada", "record_id": "flaws_cloudtrail:0000045:178e0f9e-a392-4920-b95c-60b91ebc0ada", "row_index": 45, "timestamp": "2017-05-27T05:07:27Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAGAPQIWDQ4UVWUCNZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "178e0f9e-a392-4920-b95c-60b91ebc0ada", "eventTime": "2017-05-27T05:07:27Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAGAPQIWDQ4UVWUCNZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:05:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "889ce20c-4c70-4b88-b792-eeeddf7c2713", "record_id": "flaws_cloudtrail:0000046:889ce20c-4c70-4b88-b792-eeeddf7c2713", "row_index": 46, "timestamp": "2017-05-27T05:07:28Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "889ce20c-4c70-4b88-b792-eeeddf7c2713", "eventTime": "2017-05-27T05:07:28Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAM37JPQ7OHCISQTBM", "expiration": "May 27, 2017 6:07:28 AM", "sessionToken": "FQoDYXdzECYaDFtZcOpcpS0d6tsV/CLMAYLRy8+k7ptQa73k/8go93pssB4Xs+g6qlIBZ2wujmKmvJhXk7sUNwakel1jQBoAvsBQMQqphRkcz8sXjchi0xM7SUV9ombjA3aVfBnDkPv/hzEjEBQXkTWMJSX/PYGtgkiwIETOum9GzXdIY9FDs/zmZNeeLCbktJr8JTz+kGrME1ZAQ5p/QJFMr4AopMEglfkUqUYOiq0BqGyUzJTCfHmcRGBOo8w/nQKBEGiyyNoMmiaHD3obTYF8enio3GLZLqwtCT87hhqxLuAAhyiQk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "725776ee1-7ca2-4fd3-be5d-0e2125d007f6", "record_id": "flaws_cloudtrail:0000047:725776ee1-7ca2-4fd3-be5d-0e2125d007f6", "row_index": 47, "timestamp": "2017-05-27T05:07:28Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACIEK48RHB2T2A2AI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "725776ee1-7ca2-4fd3-be5d-0e2125d007f6", "eventTime": "2017-05-27T05:07:28Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACIEK48RHB2T2A2AI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50176-0967-47c0-818a-4bbb5f5dfe96", "record_id": "flaws_cloudtrail:0000048:50176-0967-47c0-818a-4bbb5f5dfe96", "row_index": 48, "timestamp": "2017-05-27T05:07:29Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50176-0967-47c0-818a-4bbb5f5dfe96", "eventTime": "2017-05-27T05:07:29Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXFSA6CEW5TJZ9MZX", "expiration": "May 27, 2017 6:07:29 AM", "sessionToken": "FQoDYXdzECYaDAAUPbZC3UfiZATZACLMARJtUu+Im9mrXgVBnthEsUrBX7F/Dn1cjBmSeO9WC2nBTwXyCqgeBkWi9YFo6ineMscJ+K8aCQjSrWnQb/x7AEZamIo9L7M1CAGlmB19nKnoSnVwQ3L+1Kk4Atx2P2Dg96/x9KmZN5xBgNwJOkwh4zbxXl9t1HfVk6PmN0t3bLnxb/GLm0y8clpznzyU8jsFzJxOILGdTWS1R1t5m6cQxBO+7ujRhkvaklmyPhwG75xGgdKfcQMIX7lIZAXD6ilAsj4aedw701K5syAR2iiRk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb5ad041-64f1-4a28-8e4f-afa5b9792c1a", "record_id": "flaws_cloudtrail:0000049:bb5ad041-64f1-4a28-8e4f-afa5b9792c1a", "row_index": 49, "timestamp": "2017-05-27T05:07:29Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6YSTUIYBGE7O2SRJ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb5ad041-64f1-4a28-8e4f-afa5b9792c1a", "eventTime": "2017-05-27T05:07:29Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6YSTUIYBGE7O2SRJ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:29Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "629409e9-0124-4e7c-be13-17e2ce510ab1", "record_id": "flaws_cloudtrail:0000050:629409e9-0124-4e7c-be13-17e2ce510ab1", "row_index": 50, "timestamp": "2017-05-27T05:07:29Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "629409e9-0124-4e7c-be13-17e2ce510ab1", "eventTime": "2017-05-27T05:07:29Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXI25ID3MRWKOSSFM", "expiration": "May 27, 2017 6:07:29 AM", "sessionToken": "FQoDYXdzECYaDOYmRzFuiTQfEN8c3yLMAQHNliS745N4PrGm/x0knDrZHdjiDmziL8zf28Ee9I9c8SGeL0IOANHWeU9uSrllkzp70DeK2+DXAIXIHpBtiEgF5YR3KoSDX60XV26ijVkvcVuadZGu10lYUfyGcFNI5gcAYfbP3BziRTYUbcM6GQr13/mW67FVuZ1WhPkONm76ElKBBqo9VUpBOJVV6CYUzWG/oNKvQ9XR0cx5aYMIGXhSy+WcrJfAXX2ZsrMj8nMLx8Wg2d/ASetT9lyeAeiQP3fUPheBZTtYK4EZUiiRk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fd73205-8261-47ef-a7f7-104a1052c557", "record_id": "flaws_cloudtrail:0000051:6fd73205-8261-47ef-a7f7-104a1052c557", "row_index": 51, "timestamp": "2017-05-27T05:07:30Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8T7H5C5PY57Z42LT", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fd73205-8261-47ef-a7f7-104a1052c557", "eventTime": "2017-05-27T05:07:30Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8T7H5C5PY57Z42LT", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:29Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69e500f9-522a-4963-ba6d-abc5e5e7749a", "record_id": "flaws_cloudtrail:0000052:69e500f9-522a-4963-ba6d-abc5e5e7749a", "row_index": 52, "timestamp": "2017-05-27T05:07:31Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69e500f9-522a-4963-ba6d-abc5e5e7749a", "eventTime": "2017-05-27T05:07:31Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAT60URJKF4RY18M9I", "expiration": "May 27, 2017 6:07:31 AM", "sessionToken": "FQoDYXdzECYaDI/t0y86PAc6/3iYHiLMAZF4TSau7uJYio4AIkl53WLjtnkU1xZhN9lcKYrqi0K66SdRTt5eoJwUOlJT5/tqnz1uTckJ7XHsmNC7USqWwD87lcG9n7Liz3Sf9G5+UWWkiUMvJ1lguY7riZ2QSBOzyEOwSoSOOE8TjGQP1mQKLPScDKDHPtF6FHQ8X+/xaLeJB4aliLddEDZvB00rlGwCPL8sebo7ibJzgdNWNIBky+PvTjarY9GRnwleRNZC2iLxIgGzZ9Xn25q3BocP6yPOQSoGzEpB7kuXW8bu2yiTk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0de239517-e31c-4343-8e83-586bd2570a40", "record_id": "flaws_cloudtrail:0000053:0de239517-e31c-4343-8e83-586bd2570a40", "row_index": 53, "timestamp": "2017-05-27T05:07:32Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3EYVVD7GKEXYE9MP", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0de239517-e31c-4343-8e83-586bd2570a40", "eventTime": "2017-05-27T05:07:32Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3EYVVD7GKEXYE9MP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4ccf158-0038-483d-9f26-87e207bdc272", "record_id": "flaws_cloudtrail:0000054:e4ccf158-0038-483d-9f26-87e207bdc272", "row_index": 54, "timestamp": "2017-05-27T05:07:32Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4ccf158-0038-483d-9f26-87e207bdc272", "eventTime": "2017-05-27T05:07:32Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAI2UK0QAUKNQHL1Y0", "expiration": "May 27, 2017 6:07:32 AM", "sessionToken": "FQoDYXdzECYaDFsgneH0yFbkd+HiMiLMAdnYpjZBWRSx//HdbVNLhXJO8g1t821x7+ncNdIZUzTXgo3zyrfTrl7m1OWnEYuu1fs4pWQW8ziRm4HrVp1SG2M51HyedZ1Yoy2OUWJX4jDprP4cXuYpfSYBtEaNE4O9HsRQOnPIGZ9+kGYzH3+QoaK/mGBsYufzKLBhs58cPXkNnYEfzIqWAFYwlFxiJxkiLaSPV/r17vv+SqNkFo0YJKVGgYWHjyDtCXqBoDItTwEvaVFdX123eZLrOJcK1mqrjzVXkKlOnqKirmphyCiUk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7248cb1-4c6d-48c1-8f6b-9c53e6242f09", "record_id": "flaws_cloudtrail:0000055:b7248cb1-4c6d-48c1-8f6b-9c53e6242f09", "row_index": 55, "timestamp": "2017-05-27T05:07:34Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIATCK3I3NJASVW2T9E", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7248cb1-4c6d-48c1-8f6b-9c53e6242f09", "eventTime": "2017-05-27T05:07:34Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIATCK3I3NJASVW2T9E", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94d3c93e-08a2-49c9-89ba-66cb106795e6", "record_id": "flaws_cloudtrail:0000056:94d3c93e-08a2-49c9-89ba-66cb106795e6", "row_index": 56, "timestamp": "2017-05-27T05:07:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94d3c93e-08a2-49c9-89ba-66cb106795e6", "eventTime": "2017-05-27T05:07:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGXEYH7QOV8HT1JYP", "expiration": "May 27, 2017 6:07:34 AM", "sessionToken": "FQoDYXdzECYaDPDJn3aF+ZAuaBZYGiLMAZBG5VMwIMDAqOXgJm6+FJtisnJMEfXA++MDTqj8IrYNrQFlJwhpnC9XCgRrpdNblBtN0j49FQE4x/VkjHlET40LurlVdSQgpRyRS6vQzZ8tsXx0sJCQx3dq6olE+zdcXd3lekG/GmGM3KKjXH+fZQKQ0//vtf8KtLChVjdFu/yUJBPahIMkmkaKjgPqF0aB+QDdDcQJKubQgGV/cLrXV/egfbytMdoIcINaEPiR5yta/HV5qA7zc55u9bna5tveq4PAbPaAaI+KT6Ic3yiWk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30e6c971-c417-4fc9-84f1-5233ceec1f0c", "record_id": "flaws_cloudtrail:0000057:30e6c971-c417-4fc9-84f1-5233ceec1f0c", "row_index": 57, "timestamp": "2017-05-27T05:07:35Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAAV5XOX512NNLUTE8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30e6c971-c417-4fc9-84f1-5233ceec1f0c", "eventTime": "2017-05-27T05:07:35Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAAV5XOX512NNLUTE8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "826098-b41b-46dd-af7e-914dc293b0a7", "record_id": "flaws_cloudtrail:0000058:826098-b41b-46dd-af7e-914dc293b0a7", "row_index": 58, "timestamp": "2017-05-27T05:07:36Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "826098-b41b-46dd-af7e-914dc293b0a7", "eventTime": "2017-05-27T05:07:36Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIATMDNN7Q2IXC4TJ7C", "expiration": "May 27, 2017 6:07:36 AM", "sessionToken": "FQoDYXdzECYaDNKWu7LPRX3kqcCsbCLMAaytLz9Jc+Ya730v7rUbdaMrUPJY5lVnz4yZ/18XwEyxo5y7kq2Le6w1juYdKVu2V3/ag2nTlgV9/qCQaA7SiS443RFPTP6CneLEsnY4DikZHxmx1IQfeSgNAyr0/vpbHr+O4bBfVNJYsjaB7/rb2hkDtoHkqgeE//eYLbhjpDNqBjFUg5Qw09c/WrgANZV94M8rtubDwkPYqQIB2EktVIrGCq/Yj+9xJ9hsqNyCR4zDMd9tZ8/f/kPH4UB/kD4yduK0V10fPJOLWJcT+CiYk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a475521c3-607c-40b0-9b0d-2b69f658e8dd", "record_id": "flaws_cloudtrail:0000059:a475521c3-607c-40b0-9b0d-2b69f658e8dd", "row_index": 59, "timestamp": "2017-05-27T05:07:36Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIATMDNN7Q2IXC4TJ7C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a475521c3-607c-40b0-9b0d-2b69f658e8dd", "eventTime": "2017-05-27T05:07:36Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIATMDNN7Q2IXC4TJ7C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:36Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"DescribeVpcEndpointsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "607d9ca5-9e08-4a9a-8136-931562f60", "record_id": "flaws_cloudtrail:0000060:607d9ca5-9e08-4a9a-8136-931562f60", "row_index": 60, "timestamp": "2017-05-27T05:07:37Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "607d9ca5-9e08-4a9a-8136-931562f60", "eventTime": "2017-05-27T05:07:37Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8F521Y5ZG35OQQTS", "expiration": "May 27, 2017 6:07:37 AM", "sessionToken": "FQoDYXdzECYaDKjy+uyNFfZRyBkZKiLMAXkferlMZylvGoB8l2bVBjFyC0WU14nYN/oCd0NQiZHUAaDluLuOi+OVc0dQ/72pfdR39t+mR7fN6Au9hLEzT61iClHnNgxDzIfpE9PdPBaLdmJIyrr9tJpJYQYJI70xOublpFS3vMMmrv55Kst36t5B8rXngyjndIP3JZr0HRuVxMHHhBRh1Koqrcxsu5VENwN+yC9z5lbFl0AdbbMkmbiqOKXvtP+9L2ibTd4C1Y0z0BLOHP7/MmqXJclbb7MdszJcyP2ZS99vi90ncSiZk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9021be72-8ef9-43e0-ab6b-8fb8af63cf73", "record_id": "flaws_cloudtrail:0000061:9021be72-8ef9-43e0-ab6b-8fb8af63cf73", "row_index": 61, "timestamp": "2017-05-27T05:07:38Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAU14ZMNR1M3RPN862", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9021be72-8ef9-43e0-ab6b-8fb8af63cf73", "eventTime": "2017-05-27T05:07:38Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAU14ZMNR1M3RPN862", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44a6214f-c6a4-45e1-8468-e0ae293213bed", "record_id": "flaws_cloudtrail:0000062:44a6214f-c6a4-45e1-8468-e0ae293213bed", "row_index": 62, "timestamp": "2017-05-27T05:07:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44a6214f-c6a4-45e1-8468-e0ae293213bed", "eventTime": "2017-05-27T05:07:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIATFO7L8ENOQ9B3XMG", "expiration": "May 27, 2017 6:07:38 AM", "sessionToken": "FQoDYXdzECYaDAhxJWASCxAPs5KPcSLMAXI8e5bg1LDmySMnL4om7tNnTDAdfJeMCf3pc2XlHmfku+RPcUrNQ8eAM20amHOWO1HvvDkNHUwo/J0TUvaDkpYjyZACNPxERQv+9rMXdBkb2Fdbs6eR4L7lx7oZ/uUAI+/ejRGU8lLRY5pFs28mceVAqF3mNgfr83saqo4sKYIHRvMgPbHAEXStGKVv1+NwvADkXEJzDj+lqMwh22hXHKWQ9ebumFWYy4SSJMYY53LQp0w5gZ8xBFRKLehYXx0zuJufmYvBoe8zsKOd+iiak6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00c9954a-27a2-4635-bfd5-0e23544", "record_id": "flaws_cloudtrail:0000063:00c9954a-27a2-4635-bfd5-0e23544", "row_index": 63, "timestamp": "2017-05-27T05:07:39Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIATFO7L8ENOQ9B3XMG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1004, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00c9954a-27a2-4635-bfd5-0e23544", "eventTime": "2017-05-27T05:07:39Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIATFO7L8ENOQ9B3XMG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"DescribeVpcEndpointsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d499459d7-4051-4133-bf3a-abd069e6336f", "record_id": "flaws_cloudtrail:0000064:d499459d7-4051-4133-bf3a-abd069e6336f", "row_index": 64, "timestamp": "2017-05-27T05:07:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d499459d7-4051-4133-bf3a-abd069e6336f", "eventTime": "2017-05-27T05:07:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAC21IZ4HJ3KU2VWST", "expiration": "May 27, 2017 6:07:39 AM", "sessionToken": "FQoDYXdzECYaDEyCxZMm0+vWnat0pyLMAdjAKQpOJhyYaBDihsBXJ5xF/mhTR/vmASqKRH4HqJUTIwQ/Qentx7+uMkS108oMZHSzFtNzYRdPgHVoS3B9nzXSz/rrnEpYFFXW1Gk7ZwUQXbY2Uo2YHYhkMLUcFbjmr2LWVlI03Rk35roDKdZBo6Kmidj4WdLqiYCrsLgZaeUK8RxzlKaCE9J3CQHlYqAGrVdGbfuWP6pTTh17nfvqwbCTDxlkOxPs0nCUk8O9fBm6W1DACidPMPA35gF/T5OF6QuCWD2Bnj/OifdrIyibk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6485c8a8-fe99-4adf-9f0e-67d860a7fc9f", "record_id": "flaws_cloudtrail:0000065:6485c8a8-fe99-4adf-9f0e-67d860a7fc9f", "row_index": 65, "timestamp": "2017-05-27T05:07:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6485c8a8-fe99-4adf-9f0e-67d860a7fc9f", "eventTime": "2017-05-27T05:07:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA11GGZWJX140EXAZT", "expiration": "May 27, 2017 6:07:41 AM", "sessionToken": "FQoDYXdzECYaDMfk+JKPEV8zaPMzhSLMAas8h00ZNkFbIfVGmMc2IaVTdTfefe+9vfz2RgCxIu1Qu/m6DxjDbNydL9wwyuFsMvQLAULLXEABdO8qH7s81kHKFqcuIfGwwir5hFUxS+h6bJvQSzN22bhznoUs2CoKsK4nqbQTSLRhdcIoGjSuPt1L0YZoxLZa88Op7N39sy1KFXRQcClrCamlz0AvBHP5Gd/nf+d0CsoL2yfHlc1vvjNuMbBiAQfNDmROmkTpz6nIZTDZqzdzS0xLIkcqgb/qh+tlKaOygDWbuWc6xyidk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b1a26c6-477d-4362-a2a0-6a7ea28b4efd", "record_id": "flaws_cloudtrail:0000066:1b1a26c6-477d-4362-a2a0-6a7ea28b4efd", "row_index": 66, "timestamp": "2017-05-27T05:07:41Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAOVB891JQBSUWI54I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b1a26c6-477d-4362-a2a0-6a7ea28b4efd", "eventTime": "2017-05-27T05:07:41Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAOVB891JQBSUWI54I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "791e4279-8e18-4f1d-af14-2b03c78cc8ea", "record_id": "flaws_cloudtrail:0000067:791e4279-8e18-4f1d-af14-2b03c78cc8ea", "row_index": 67, "timestamp": "2017-05-27T05:07:42Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "791e4279-8e18-4f1d-af14-2b03c78cc8ea", "eventTime": "2017-05-27T05:07:42Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPGA4OW78DMYA3NVR", "expiration": "May 27, 2017 6:07:42 AM", "sessionToken": "FQoDYXdzECYaDIMMX89y54Utt1ETZiLMAc6i+N0iEtemzaxRPuPcwA4FVvx8y6PjLJCw1n0mKutSiUiJSAn6EEgRi3I05WJiQMjzIjpXhLIyvDfJj1NyHOulzwzWYDSv/grvxnzx0guKj1eSHmdJNCYZaCio2gV/I0lhmPsjFPEl70nREmhnjxbC+H2ggic+R9qmdb9I+aUSiM++hT8cRPyjNShdg23KrgU9Q0j2HsYjCnhTTcoUfZihaxk/OyKWOkKOJha6LuJjlehVyGa0V699EIsXzVPzwRoTJGafB6dvF71Veiiek6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "217d05be-cb6c-447e-a269-72f10dca705b", "record_id": "flaws_cloudtrail:0000068:217d05be-cb6c-447e-a269-72f10dca705b", "row_index": 68, "timestamp": "2017-05-27T05:07:42Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "217d05be-cb6c-447e-a269-72f10dca705b", "eventTime": "2017-05-27T05:07:42Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPDL19F05BQRFU70N", "expiration": "May 27, 2017 6:07:42 AM", "sessionToken": "FQoDYXdzECYaDC762YpN5ajidn0ndiLMAXgBKX2ZRcMPBu0bhJ3iAQ1Pc+pifAwTai0ElLnvcLDcG62f/YLklrURBmMIg5fn2s1WchC/ehPPLx2GofhB6n97pKvym6E4ewx0sW8rtRJc2CDcp19FQwwyfSu5HWBUXRduZaw1dST+Kvgg+NKlawliJUo8FX7PIm1AQY9cWpyv/BY8dT4wynXA0N09wGr7tZZRbyVp8gvZOG3LJwI9xPf/YGFYYaT3OgT9kqrI9235xBm+JJ52SNXzk5iAML1llVEF0b+ZTG6psOb4wCiek6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9de72a33-2d76-43ba-aa6c-e931147459a1", "record_id": "flaws_cloudtrail:0000069:9de72a33-2d76-43ba-aa6c-e931147459a1", "row_index": 69, "timestamp": "2017-05-27T05:07:44Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAZ9FCU2M9GZ9UYTXL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9de72a33-2d76-43ba-aa6c-e931147459a1", "eventTime": "2017-05-27T05:07:44Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAZ9FCU2M9GZ9UYTXL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:42Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f36c0817-900c-4fe3-b82a-e7cfcef32ad8", "record_id": "flaws_cloudtrail:0000070:f36c0817-900c-4fe3-b82a-e7cfcef32ad8", "row_index": 70, "timestamp": "2017-05-27T05:07:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f36c0817-900c-4fe3-b82a-e7cfcef32ad8", "eventTime": "2017-05-27T05:07:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIALFQEO727W2MAY8QW", "expiration": "May 27, 2017 6:07:44 AM", "sessionToken": "FQoDYXdzECYaDIx4zPi0K6LgmSkfViLMAQwkOI2DfUyKT5eVVDpndwLV928wyYS7BtY02VTG9GdXA6G/lhJfS8BgdqhLiHZdhRDR5q6764CEeaF1TmuQdJHBXyaLwtfmNqZwKafIygLF/aY+ZOiPeMErtWy+5pLWJ+MMBJvZkV/S95fD4iVSh+toZ+0uf1gD30RrhC5TFj4cllZtTnPVU3GrrVxEu9Y5QpY2zmfzh4LwKxxtHR40TX0ARqAtk83SASLMdodEJlx7DVmD4TgkH7g2yk3j0AEqUJYHy66FUNRceXu+Aiigk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "200acb82-2623-4b2f-b10f-8ff08d156668", "record_id": "flaws_cloudtrail:0000071:200acb82-2623-4b2f-b10f-8ff08d156668", "row_index": 71, "timestamp": "2017-05-27T05:07:45Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA71U6WKKJJ6BNOTQH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1005, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "200acb82-2623-4b2f-b10f-8ff08d156668", "eventTime": "2017-05-27T05:07:45Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA71U6WKKJJ6BNOTQH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8808ca6-7f77-4a6c-8e0a-5ef8fcc6e387", "record_id": "flaws_cloudtrail:0000072:c8808ca6-7f77-4a6c-8e0a-5ef8fcc6e387", "row_index": 72, "timestamp": "2017-05-27T05:07:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8808ca6-7f77-4a6c-8e0a-5ef8fcc6e387", "eventTime": "2017-05-27T05:07:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIARRNUADBTN5J6BO7C", "expiration": "May 27, 2017 6:07:45 AM", "sessionToken": "FQoDYXdzECYaDMhZijLWoAM92iXcfCLMAccoyA16Ol3sTTK/WJexM9Tdy/qjwjNZPl24WNa7afxZ0jAM4u3b299D80zWfBsX/GOXlM9xVjXuv4o71v4WjGt7VX0SZ+kpP2paxVJ2dbAQKmNhYu0gwEYKM+qBLjiX5ParPBwwRIW0pgvlZNwGcieuyMfLccSgalzGq5qk5E6nKxV9cbS97Eab9y3P2UYCsz1LyIec9mbN1dT7qySLZM2wxZxnJb5RFRf7XxmCtIXtGKOWh88oIZmlWTemv9cdN9J1IuHvJ+ASb16s1Cihk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee0c3a9d-4ce7-4eff-bbf8-f9b2c7059b4e", "record_id": "flaws_cloudtrail:0000073:ee0c3a9d-4ce7-4eff-bbf8-f9b2c7059b4e", "row_index": 73, "timestamp": "2017-05-27T05:07:46Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAMKVJZOYNDJS5WTB5", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee0c3a9d-4ce7-4eff-bbf8-f9b2c7059b4e", "eventTime": "2017-05-27T05:07:46Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAMKVJZOYNDJS5WTB5", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d43e1a24-3caf-461c-86dd-107ea3e71b2e", "record_id": "flaws_cloudtrail:0000074:d43e1a24-3caf-461c-86dd-107ea3e71b2e", "row_index": 74, "timestamp": "2017-05-27T05:07:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d43e1a24-3caf-461c-86dd-107ea3e71b2e", "eventTime": "2017-05-27T05:07:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA96ZDK7T5XWZ7D7UV", "expiration": "May 27, 2017 6:07:47 AM", "sessionToken": "FQoDYXdzECYaDLJr+ucyPxLqgcBzSSLMAY4Gv79NS9NIHeDMYgzYTkh+x4t97p0saHRAq8WvTuq/GSNjkKL/j33i90Z1YbQOXv6mZSK6p2oDr3Khybv4ezj0uAoBVEn1gFrPk3pszxyRCSyv6vr3TBzhB9IoQJyE6I4uKeYU609I6hVhKqv9O4T45TnU7NPgZBL3dwdZgxqy2lF4bCjVIusZc5Taspdz9vjWXsbHKq8/mVthKgCMU68+5DiGF5KfZfvKGwznhcFwa2U15YdUt9cy9ihnlADIDZoMUhCVcwgqSA/9lSijk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80c63dbd-4ef9-4aff-ae99-d1c869e9dbb1", "record_id": "flaws_cloudtrail:0000075:80c63dbd-4ef9-4aff-ae99-d1c869e9dbb1", "row_index": 75, "timestamp": "2017-05-27T05:07:48Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA96ZDK7T5XWZ7D7UV", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1005, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80c63dbd-4ef9-4aff-ae99-d1c869e9dbb1", "eventTime": "2017-05-27T05:07:48Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA96ZDK7T5XWZ7D7UV", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"DescribeVpcEndpointsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0d7d27e-b8f0-4ab4-aefb-3824f044d7dd", "record_id": "flaws_cloudtrail:0000076:b0d7d27e-b8f0-4ab4-aefb-3824f044d7dd", "row_index": 76, "timestamp": "2017-05-27T05:07:48Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0d7d27e-b8f0-4ab4-aefb-3824f044d7dd", "eventTime": "2017-05-27T05:07:48Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUXG5QM01YVFQHHJL", "expiration": "May 27, 2017 6:07:48 AM", "sessionToken": "FQoDYXdzECYaDJVULaZqbSB7ug6miSLMAbZoJtGXwwJp81bNnaWglYR/pe+K2AdLGcxLjjzofR9Mcje55evozlSigaKuHHAMsMUasoag/SJcmJaFeswDYvgA5rmPmD5IHXXcwrWDI5ZDsoApOu+0a1ke5+JlDNRgLGPTMN6ffRSnjREoz8MrEpkdp8ECeghN5kBvLZH1Y9FmcHvuhMM664ZiYMUVi8fNI5f/kmROkxdH3s1mgIOLBQv6kcheNdSYcKs1HmCtVrBE2aOugNM2dn3uE9M3Mqz9sGlDV0x7EDzmzdyNpSikk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "836375-a7df-417d-b3ba-f0646c63669d", "record_id": "flaws_cloudtrail:0000077:836375-a7df-417d-b3ba-f0646c63669d", "row_index": 77, "timestamp": "2017-05-27T05:07:49Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAUXG5QM01YVFQHHJL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "836375-a7df-417d-b3ba-f0646c63669d", "eventTime": "2017-05-27T05:07:49Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAUXG5QM01YVFQHHJL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7532df7-feb8-469b-bd4a-5effb1e5aef1", "record_id": "flaws_cloudtrail:0000078:b7532df7-feb8-469b-bd4a-5effb1e5aef1", "row_index": 78, "timestamp": "2017-05-27T05:07:50Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAUXG5QM01YVFQHHJL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7532df7-feb8-469b-bd4a-5effb1e5aef1", "eventTime": "2017-05-27T05:07:50Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAUXG5QM01YVFQHHJL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ad6dc52-1c1b-4b7c-acd1-19c5a9320cce", "record_id": "flaws_cloudtrail:0000079:9ad6dc52-1c1b-4b7c-acd1-19c5a9320cce", "row_index": 79, "timestamp": "2017-05-27T05:07:51Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAUXG5QM01YVFQHHJL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ad6dc52-1c1b-4b7c-acd1-19c5a9320cce", "eventTime": "2017-05-27T05:07:51Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAUXG5QM01YVFQHHJL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d85289-303f-45ac-8b64-8ce7a5dea9e1", "record_id": "flaws_cloudtrail:0000080:d85289-303f-45ac-8b64-8ce7a5dea9e1", "row_index": 80, "timestamp": "2017-05-27T05:07:53Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAUXG5QM01YVFQHHJL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d85289-303f-45ac-8b64-8ce7a5dea9e1", "eventTime": "2017-05-27T05:07:53Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAUXG5QM01YVFQHHJL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cef2d43-5f10-4c68-bfbe-1f43f4c996f8", "record_id": "flaws_cloudtrail:0000081:8cef2d43-5f10-4c68-bfbe-1f43f4c996f8", "row_index": 81, "timestamp": "2017-05-27T05:07:54Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAUXG5QM01YVFQHHJL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cef2d43-5f10-4c68-bfbe-1f43f4c996f8", "eventTime": "2017-05-27T05:07:54Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAUXG5QM01YVFQHHJL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f426af5-1b43-4088-9392-9cc53aa6c4d2", "record_id": "flaws_cloudtrail:0000082:1f426af5-1b43-4088-9392-9cc53aa6c4d2", "row_index": 82, "timestamp": "2017-05-27T05:07:55Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAUXG5QM01YVFQHHJL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f426af5-1b43-4088-9392-9cc53aa6c4d2", "eventTime": "2017-05-27T05:07:55Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAUXG5QM01YVFQHHJL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65dc08d5-428c-4797-9f50-cb0eec091695", "record_id": "flaws_cloudtrail:0000083:65dc08d5-428c-4797-9f50-cb0eec091695", "row_index": 83, "timestamp": "2017-05-27T05:07:55Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAUXG5QM01YVFQHHJL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65dc08d5-428c-4797-9f50-cb0eec091695", "eventTime": "2017-05-27T05:07:55Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAUXG5QM01YVFQHHJL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0425e268-8ee4-4626-8005-b2f984641d77c", "record_id": "flaws_cloudtrail:0000084:0425e268-8ee4-4626-8005-b2f984641d77c", "row_index": 84, "timestamp": "2017-05-27T05:07:57Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAUXG5QM01YVFQHHJL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0425e268-8ee4-4626-8005-b2f984641d77c", "eventTime": "2017-05-27T05:07:57Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAUXG5QM01YVFQHHJL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "133c3616-1a2d-45f0-a712-c77728edca79", "record_id": "flaws_cloudtrail:0000085:133c3616-1a2d-45f0-a712-c77728edca79", "row_index": 85, "timestamp": "2017-05-27T05:07:57Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAUXG5QM01YVFQHHJL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "133c3616-1a2d-45f0-a712-c77728edca79", "eventTime": "2017-05-27T05:07:57Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAUXG5QM01YVFQHHJL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1d83e20-9629-4886-82d8-a1f0f994391da", "record_id": "flaws_cloudtrail:0000086:a1d83e20-9629-4886-82d8-a1f0f994391da", "row_index": 86, "timestamp": "2017-05-27T05:07:58Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAUXG5QM01YVFQHHJL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1d83e20-9629-4886-82d8-a1f0f994391da", "eventTime": "2017-05-27T05:07:58Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAUXG5QM01YVFQHHJL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70953e-6d8d-42e6-a712-8bd6b13f9d37", "record_id": "flaws_cloudtrail:0000087:70953e-6d8d-42e6-a712-8bd6b13f9d37", "row_index": 87, "timestamp": "2017-05-27T05:07:59Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAUXG5QM01YVFQHHJL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70953e-6d8d-42e6-a712-8bd6b13f9d37", "eventTime": "2017-05-27T05:07:59Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAUXG5QM01YVFQHHJL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dedc668-a484-409a-a2b2-4ab9370f642a", "record_id": "flaws_cloudtrail:0000088:9dedc668-a484-409a-a2b2-4ab9370f642a", "row_index": 88, "timestamp": "2017-05-27T05:07:59Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAUXG5QM01YVFQHHJL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dedc668-a484-409a-a2b2-4ab9370f642a", "eventTime": "2017-05-27T05:07:59Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAUXG5QM01YVFQHHJL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc787500-ec77-4b43-bc6f-9dfb39afbf60", "record_id": "flaws_cloudtrail:0000089:dc787500-ec77-4b43-bc6f-9dfb39afbf60", "row_index": 89, "timestamp": "2017-05-27T05:08:00Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAUXG5QM01YVFQHHJL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1004, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc787500-ec77-4b43-bc6f-9dfb39afbf60", "eventTime": "2017-05-27T05:08:00Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAUXG5QM01YVFQHHJL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29608eee-b5c3-4134-b54c-65b9ae38ce97", "record_id": "flaws_cloudtrail:0000090:29608eee-b5c3-4134-b54c-65b9ae38ce97", "row_index": 90, "timestamp": "2017-05-27T05:08:00Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAUXG5QM01YVFQHHJL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29608eee-b5c3-4134-b54c-65b9ae38ce97", "eventTime": "2017-05-27T05:08:00Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAUXG5QM01YVFQHHJL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:07:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72a86e9a-a8f1-42c2-960f-880bdc8ac023", "record_id": "flaws_cloudtrail:0000091:72a86e9a-a8f1-42c2-960f-880bdc8ac023", "row_index": 91, "timestamp": "2017-05-27T05:08:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72a86e9a-a8f1-42c2-960f-880bdc8ac023", "eventTime": "2017-05-27T05:08:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKN3O3Y8NBTW1YOGI", "expiration": "May 27, 2017 6:08:01 AM", "sessionToken": "FQoDYXdzECYaDK8/fK6kLXp0xI6CMCLMAQ5iJZYsMpHx293oykkDl6iQCPmtlyGtsvJ89ePKAMSNe88lK+dgqU3zi4MAsHxqVwSEJly36OYXnw4O65jmzSRnWSIHp6z6MDkI6Z6JRcLo0aYI7oEPX9LjN2Oa6tF1oJxnktJdwKQFpdScofpYcJeSyfKGITmDLEj4uIDfuoh0PwhYe0obV7ZP5Hh12q5ZqwrfeMbV9UBMo8eLI5ATP3dMi/QUAlCatvPFWbOI4gXFi16gr2/zPet7d1dt05R2J+0sQotHNhYy6I2B1Sixk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7a0813a-bef1-4615-a85b-f1ac11c593a6", "record_id": "flaws_cloudtrail:0000092:f7a0813a-bef1-4615-a85b-f1ac11c593a6", "row_index": 92, "timestamp": "2017-05-27T05:08:02Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKN3O3Y8NBTW1YOGI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7a0813a-bef1-4615-a85b-f1ac11c593a6", "eventTime": "2017-05-27T05:08:02Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKN3O3Y8NBTW1YOGI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1d22dc5-d694-45b9-a1cd-53f2b56a4f73", "record_id": "flaws_cloudtrail:0000093:b1d22dc5-d694-45b9-a1cd-53f2b56a4f73", "row_index": 93, "timestamp": "2017-05-27T05:08:03Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKN3O3Y8NBTW1YOGI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1d22dc5-d694-45b9-a1cd-53f2b56a4f73", "eventTime": "2017-05-27T05:08:03Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKN3O3Y8NBTW1YOGI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67090c98-b085-41a9-b7c8-b436ef009dc0", "record_id": "flaws_cloudtrail:0000094:67090c98-b085-41a9-b7c8-b436ef009dc0", "row_index": 94, "timestamp": "2017-05-27T05:08:04Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKN3O3Y8NBTW1YOGI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67090c98-b085-41a9-b7c8-b436ef009dc0", "eventTime": "2017-05-27T05:08:04Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKN3O3Y8NBTW1YOGI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7384b1e3-ddae-4b63-9db6-bfe6c97b07c0", "record_id": "flaws_cloudtrail:0000095:7384b1e3-ddae-4b63-9db6-bfe6c97b07c0", "row_index": 95, "timestamp": "2017-05-27T05:08:05Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKN3O3Y8NBTW1YOGI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7384b1e3-ddae-4b63-9db6-bfe6c97b07c0", "eventTime": "2017-05-27T05:08:05Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKN3O3Y8NBTW1YOGI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dca397c9-3220-4ac7-a021-ec8ba700e7cb", "record_id": "flaws_cloudtrail:0000096:dca397c9-3220-4ac7-a021-ec8ba700e7cb", "row_index": 96, "timestamp": "2017-05-27T05:08:06Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKN3O3Y8NBTW1YOGI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dca397c9-3220-4ac7-a021-ec8ba700e7cb", "eventTime": "2017-05-27T05:08:06Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKN3O3Y8NBTW1YOGI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f57e9cd1-adc5-4ddf-8ca4-6c76845f7be", "record_id": "flaws_cloudtrail:0000097:f57e9cd1-adc5-4ddf-8ca4-6c76845f7be", "row_index": 97, "timestamp": "2017-05-27T05:08:07Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKN3O3Y8NBTW1YOGI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1010, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f57e9cd1-adc5-4ddf-8ca4-6c76845f7be", "eventTime": "2017-05-27T05:08:07Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKN3O3Y8NBTW1YOGI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c19cf61e-af59-4d8e-866d-614d947c9357", "record_id": "flaws_cloudtrail:0000098:c19cf61e-af59-4d8e-866d-614d947c9357", "row_index": 98, "timestamp": "2017-05-27T05:08:08Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKN3O3Y8NBTW1YOGI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c19cf61e-af59-4d8e-866d-614d947c9357", "eventTime": "2017-05-27T05:08:08Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKN3O3Y8NBTW1YOGI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16812d77-96a2-46f9-93fa-c930972bee47", "record_id": "flaws_cloudtrail:0000099:16812d77-96a2-46f9-93fa-c930972bee47", "row_index": 99, "timestamp": "2017-05-27T05:08:09Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKN3O3Y8NBTW1YOGI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16812d77-96a2-46f9-93fa-c930972bee47", "eventTime": "2017-05-27T05:08:09Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKN3O3Y8NBTW1YOGI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcea5e8a-8043-4407-b6a1-ccb9ee5e41e7", "record_id": "flaws_cloudtrail:0000100:bcea5e8a-8043-4407-b6a1-ccb9ee5e41e7", "row_index": 100, "timestamp": "2017-05-27T05:08:10Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKN3O3Y8NBTW1YOGI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcea5e8a-8043-4407-b6a1-ccb9ee5e41e7", "eventTime": "2017-05-27T05:08:10Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKN3O3Y8NBTW1YOGI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88253-cf9c-42e4-afe1-e67826cb8", "record_id": "flaws_cloudtrail:0000101:88253-cf9c-42e4-afe1-e67826cb8", "row_index": 101, "timestamp": "2017-05-27T05:08:11Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKN3O3Y8NBTW1YOGI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 999, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88253-cf9c-42e4-afe1-e67826cb8", "eventTime": "2017-05-27T05:08:11Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKN3O3Y8NBTW1YOGI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18b6f465-dec7-43aa-bfe0-34d0f8fdba65", "record_id": "flaws_cloudtrail:0000102:18b6f465-dec7-43aa-bfe0-34d0f8fdba65", "row_index": 102, "timestamp": "2017-05-27T05:08:11Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKN3O3Y8NBTW1YOGI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18b6f465-dec7-43aa-bfe0-34d0f8fdba65", "eventTime": "2017-05-27T05:08:11Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKN3O3Y8NBTW1YOGI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f14eb138-c44c-43e6-ac5a-0895c03c973c", "record_id": "flaws_cloudtrail:0000103:f14eb138-c44c-43e6-ac5a-0895c03c973c", "row_index": 103, "timestamp": "2017-05-27T05:08:12Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKN3O3Y8NBTW1YOGI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f14eb138-c44c-43e6-ac5a-0895c03c973c", "eventTime": "2017-05-27T05:08:12Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKN3O3Y8NBTW1YOGI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0278e96-b1fe-4d10-a510-16ac42d29a1e", "record_id": "flaws_cloudtrail:0000104:a0278e96-b1fe-4d10-a510-16ac42d29a1e", "row_index": 104, "timestamp": "2017-05-27T05:08:12Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKN3O3Y8NBTW1YOGI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0278e96-b1fe-4d10-a510-16ac42d29a1e", "eventTime": "2017-05-27T05:08:12Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKN3O3Y8NBTW1YOGI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c511f1f-91a5-498b-9b37-28dafcae90c1", "record_id": "flaws_cloudtrail:0000105:9c511f1f-91a5-498b-9b37-28dafcae90c1", "row_index": 105, "timestamp": "2017-05-27T05:08:13Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c511f1f-91a5-498b-9b37-28dafcae90c1", "eventTime": "2017-05-27T05:08:13Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIANTR2ENFW0OC7AUBD", "expiration": "May 27, 2017 6:08:13 AM", "sessionToken": "FQoDYXdzECYaDIHBEyUW/tTmtl3kcCLMARifp4t1LFewxlWaFwlezcZlkx1i+eeZrMxol7FKTVcvc9vI1lLxl4CpJ2RQB/eAMCCK6HnN3GmGMkykfHosbja0CN7Zp5wwgm1/aveh6fDZDxCuU3Ji2BhwVVfp9gAWk7gfAkBTYVmRUa1f4KsPc2r6zyOm7i0hFLrch7DZ9N7Byo9s26YrsPaGHeVKCLud/28JcAV/WKPFtyG5yRZTfxF5f+JV4OMxt7atYbT0q/a6FxLQWHQV3747LeXijnmfYYRYjpkbdHeMAuHRNyi9k6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d22b094-56a1-4b17-8f6d-1b8cd4075797", "record_id": "flaws_cloudtrail:0000106:0d22b094-56a1-4b17-8f6d-1b8cd4075797", "row_index": 106, "timestamp": "2017-05-27T05:08:13Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKN3O3Y8NBTW1YOGI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1004, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d22b094-56a1-4b17-8f6d-1b8cd4075797", "eventTime": "2017-05-27T05:08:13Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKN3O3Y8NBTW1YOGI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d39217c-927b-4431-b784-be11b867894a", "record_id": "flaws_cloudtrail:0000107:9d39217c-927b-4431-b784-be11b867894a", "row_index": 107, "timestamp": "2017-05-27T05:08:14Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d39217c-927b-4431-b784-be11b867894a", "eventTime": "2017-05-27T05:08:14Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIACZRJY8XIHZE7OEEL", "expiration": "May 27, 2017 6:08:14 AM", "sessionToken": "FQoDYXdzECYaDDNDEys2cg4dxOl2NyLMAVOtg9o1u5WKktGhIlrZxUO8ggCbkaWYBNUObbPygD340A/ekjiecCyfH7OwhVZN9c8r7hXQtFTux9ShuImT/Ky2ZkTnbRsPm3HCirjnV8zqVTcq7kNGgLnbJpF6ClUUTlHbnTmHZ8Ivow12h83Qifl+QEugj0Hzz14gULhmwIlIPPkey2FkTFvy+3wP1mBNjPzoZv4Wi3VnZqpY+UwckcAZu+E0l3lwAI5vOK4nhz1P1Cv7g22ddTxfPubdWd06a0UyoeRyu0RvYRTVvii+k6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d713753f6-0d55-4730-af3b-ec5d82b9c4c8", "record_id": "flaws_cloudtrail:0000108:d713753f6-0d55-4730-af3b-ec5d82b9c4c8", "row_index": 108, "timestamp": "2017-05-27T05:08:14Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIANTR2ENFW0OC7AUBD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d713753f6-0d55-4730-af3b-ec5d82b9c4c8", "eventTime": "2017-05-27T05:08:14Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIANTR2ENFW0OC7AUBD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:13Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16ca3eac-13d0-40e6-953e-11a3faa3e61f", "record_id": "flaws_cloudtrail:0000109:16ca3eac-13d0-40e6-953e-11a3faa3e61f", "row_index": 109, "timestamp": "2017-05-27T05:08:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16ca3eac-13d0-40e6-953e-11a3faa3e61f", "eventTime": "2017-05-27T05:08:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA730FM38RCVPAW537", "expiration": "May 27, 2017 6:08:15 AM", "sessionToken": "FQoDYXdzECYaDOWzgFvDuM6ubryjrCLMAZK7tGwwGKvH1nOIH7C5cVNukQx9L1REclsJGNmn1cs+/xfYBFLTHJ7+j7asvD43F7zjmOjpSZwV9CcAFPgqQBJBhnTp+Lqk5DO6yn71Ti/2C9xYcNeLqk91syHQ4QZwm7aHHAMVoQHCK/JB542ykd1ZPZC8twwGklprR0XCi9H1YCpnLqyHBMC1pKqDHlJlOsmheFeSUd6d4w5wTUkl/Rcsux+0Pix4u0uvWiKlHVliN7jRrjlFK4tJEynUYj9cgt6h03sRhhbPrsaPoyi/k6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fdc4465-d0a5-47d4-9fe9-b7ebf654514c2", "record_id": "flaws_cloudtrail:0000110:7fdc4465-d0a5-47d4-9fe9-b7ebf654514c2", "row_index": 110, "timestamp": "2017-05-27T05:08:15Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACZRJY8XIHZE7OEEL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1005, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fdc4465-d0a5-47d4-9fe9-b7ebf654514c2", "eventTime": "2017-05-27T05:08:15Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACZRJY8XIHZE7OEEL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:14Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d03cc419-a70a-4797-8e07-ec33448f6589", "record_id": "flaws_cloudtrail:0000111:d03cc419-a70a-4797-8e07-ec33448f6589", "row_index": 111, "timestamp": "2017-05-27T05:08:16Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA730FM38RCVPAW537", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d03cc419-a70a-4797-8e07-ec33448f6589", "eventTime": "2017-05-27T05:08:16Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA730FM38RCVPAW537", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49362-781d-46d7-8b8a-82c09ec23dae", "record_id": "flaws_cloudtrail:0000112:49362-781d-46d7-8b8a-82c09ec23dae", "row_index": 112, "timestamp": "2017-05-27T05:08:17Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49362-781d-46d7-8b8a-82c09ec23dae", "eventTime": "2017-05-27T05:08:17Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJORUWSK8CGV49GJR", "expiration": "May 27, 2017 6:08:17 AM", "sessionToken": "FQoDYXdzECYaDAzpyvJ1W0FG4GIh1CLMAZzJsY6lfWoFg60ErcFUO8uVBK+jK9RU8xxyjZrfu3HPaANzE0SqsDV09b15qm5wJmbnUGKTBLexstKEt67ccs/7gZ0+wzZI0QRbuuaw1BZQEOHYkb2qy/ehm0zVN6O5IRJv0gXM/2k8agrIws3O+4l6Kj5e/ENC1jpYkJTWhEOEu/ojDW5W7DONQ4tyIJD+r3aGZrt1OuPilIJN7xbXGQuC21URiKF/AiR58lPcnwUWBBmv5mf947xJ+268IBlAMlZzCE9uOouTdF042ijBk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95ef1a52-8373-47ee-8da6-5a167ea42018", "record_id": "flaws_cloudtrail:0000113:95ef1a52-8373-47ee-8da6-5a167ea42018", "row_index": 113, "timestamp": "2017-05-27T05:08:18Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAJORUWSK8CGV49GJR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1010, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95ef1a52-8373-47ee-8da6-5a167ea42018", "eventTime": "2017-05-27T05:08:18Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAJORUWSK8CGV49GJR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "137267ed0-76c5-4875-b3ad-4e69f89b7d76", "record_id": "flaws_cloudtrail:0000114:137267ed0-76c5-4875-b3ad-4e69f89b7d76", "row_index": 114, "timestamp": "2017-05-27T05:08:19Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "137267ed0-76c5-4875-b3ad-4e69f89b7d76", "eventTime": "2017-05-27T05:08:19Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAY70S24WWPJS3WY8", "expiration": "May 27, 2017 6:08:19 AM", "sessionToken": "FQoDYXdzECYaDIDEg+kLKiagF5hQiyLMAXc6XZOfPVt6z7i2C4XYEz0HMGJ/OM8UmlzfVtHpEMQssLwte7z3pxcZaRaQPySvGMpCBZaANwBfOH0zwmz2j4t6r4joRscjYTP8l/L13moTexhqkZx1bVgrQbjaeV+1vQo4gsjxRNY4C/3ZuQOvjWxGcMoNUWeASUzZ7UUhzqNaNbwHrCfCwcRYrnA7eSsKbTuC9BCU8O0BU9evvxCtYWUs4DQlw9nobvLMyLIckUsGKu578fgLw7XbCXbgR+nUlgL2V8czzTmv19OeISjDk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc7dddae-476a-4c35-944f-0a9e66f8f965", "record_id": "flaws_cloudtrail:0000115:fc7dddae-476a-4c35-944f-0a9e66f8f965", "row_index": 115, "timestamp": "2017-05-27T05:08:20Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAAY70S24WWPJS3WY8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc7dddae-476a-4c35-944f-0a9e66f8f965", "eventTime": "2017-05-27T05:08:20Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAAY70S24WWPJS3WY8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cef4543c-3270-426f-b4c8-5bbefd7614ba", "record_id": "flaws_cloudtrail:0000116:cef4543c-3270-426f-b4c8-5bbefd7614ba", "row_index": 116, "timestamp": "2017-05-27T05:08:20Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cef4543c-3270-426f-b4c8-5bbefd7614ba", "eventTime": "2017-05-27T05:08:20Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9UB0VSRNI3JHRZ18", "expiration": "May 27, 2017 6:08:20 AM", "sessionToken": "FQoDYXdzECYaDBqXoaxpryXm2IdhPyLMAVHc2EGT7qGoTKt6d62vIC57fsKT7NWq9YR9OuKXnz+FhSpZRHpjoiC6xBLn7BYyr5fE1FQhJiCHAvQ3+ebl/AeW5CH89g9j6FI5AnjTa82O2vQQcZ9WMg6gzWjcEWPQlrFBAl4WLVILzuKlVMwU+31RbxefHrbLHzpxC/aZL//i4wQyF8cizNr1jt3gpd/K0GF5z8fa07S44IMOUgFVsycC5u6pekPT4dV6HDJrynYoJFbWph4AE1ASkj5Hj3gLgHhnJPL0SpJZWJ1bNyjEk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bb8ce75-418d-4282-8ebc-db5ed98535d7", "record_id": "flaws_cloudtrail:0000117:5bb8ce75-418d-4282-8ebc-db5ed98535d7", "row_index": 117, "timestamp": "2017-05-27T05:08:21Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9UB0VSRNI3JHRZ18", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bb8ce75-418d-4282-8ebc-db5ed98535d7", "eventTime": "2017-05-27T05:08:21Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9UB0VSRNI3JHRZ18", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:20Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4eadc577-2552-490e-8e0c-f978c960da34", "record_id": "flaws_cloudtrail:0000118:4eadc577-2552-490e-8e0c-f978c960da34", "row_index": 118, "timestamp": "2017-05-27T05:08:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4eadc577-2552-490e-8e0c-f978c960da34", "eventTime": "2017-05-27T05:08:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAE92RI7DXVU2TAXBQ", "expiration": "May 27, 2017 6:08:21 AM", "sessionToken": "FQoDYXdzECYaDDufB2OoJhwwJYzkZCLMAdSJ9h8xbYhPLRRcJzI3nMVSWhb+y1e85XSTzXI3PbIbAn0U3gbbc3ALZoomrkIYnpx5JS0oeoZsDes92lpjj+Pd4qQQv0bm3a8axQnLn45zxYG3kqYlCHNVWsh9Snum4gTpWyAUW0bPMP/Oi1tuxUJAgZllT49sP0aKEuKX1nzZ2WbAsJrsICwfigMlle0tFmQWWPztU/6+Hy+SBhk8joqc0V495zpPXUQiUBusWuxKNiuKXtOEYTsLNMBOf5b1K3JMkOk+CPRUD1y8+SjFk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6d150279-901f-4e9b-bd79-1cbd926d2a9b", "record_id": "flaws_cloudtrail:0000119:e6d150279-901f-4e9b-bd79-1cbd926d2a9b", "row_index": 119, "timestamp": "2017-05-27T05:08:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6d150279-901f-4e9b-bd79-1cbd926d2a9b", "eventTime": "2017-05-27T05:08:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1IKAV0AFNAZNVDSB", "expiration": "May 27, 2017 6:08:22 AM", "sessionToken": "FQoDYXdzECYaDI0D3U3bfvjrgYYjviLMAahLH6XmV5P+JQBvB8+MGhA0bSOGtAHyc6qX0OISlgryZAje0mbNVA8dzFnd4/lKaxNqjmOD1NtZpc3HKyeNSiUOAKbpAesj+qm2NRkGkdLqFzRmwkVWRvd5mBKaDrJOgcU3LPBVGm02dg/gypvS3MW17RSX/gQ4UqMHIoCTXLEwJPnwVkKZoGrXz00qpg7LGeUeoi/oGYL1JbTlFplTN5PvVF92Fm2VyqB/5rDRdTdh/ahL2O70wBcCDJuiaL/D6jsKnLMmRK8v+XAbuCjGk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2248d425-796f-4b72-941b-cadc15471ebf", "record_id": "flaws_cloudtrail:0000120:2248d425-796f-4b72-941b-cadc15471ebf", "row_index": 120, "timestamp": "2017-05-27T05:08:22Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAE92RI7DXVU2TAXBQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1004, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2248d425-796f-4b72-941b-cadc15471ebf", "eventTime": "2017-05-27T05:08:22Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAE92RI7DXVU2TAXBQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebdd49e5-01df-4aeb-aac8-746c24639eb", "record_id": "flaws_cloudtrail:0000121:ebdd49e5-01df-4aeb-aac8-746c24639eb", "row_index": 121, "timestamp": "2017-05-27T05:08:24Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1IKAV0AFNAZNVDSB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1010, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebdd49e5-01df-4aeb-aac8-746c24639eb", "eventTime": "2017-05-27T05:08:24Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1IKAV0AFNAZNVDSB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af76a8bf-ff4a-490c-9379-6fdb7f0b6578", "record_id": "flaws_cloudtrail:0000122:af76a8bf-ff4a-490c-9379-6fdb7f0b6578", "row_index": 122, "timestamp": "2017-05-27T05:08:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af76a8bf-ff4a-490c-9379-6fdb7f0b6578", "eventTime": "2017-05-27T05:08:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAK7F5C4KR1EE3BCHA", "expiration": "May 27, 2017 6:08:24 AM", "sessionToken": "FQoDYXdzECYaDDDTdzIX74xZQozkFSLMAatgpI3m0kXBcqIIArBSbAaq4APb/iENcMt/TNx5w9M5FdzylqsDYZerN5W+Ui0rOoG2onU+OGT66wYnVMnzrit80X2UzvWlcaljm/DaZ2Uh5OZ4xuIVICBWsd9VHHMwLpkFlkWV1DxUiZjKWDWfVzjcy1RWHgtxO6qz3kj9uttBLNur03KXwl2R1ZyFzdDlblAK95MKLIP3y3LdGQrUZrdIMjE+2f1dVHZuLMhJMGqdysu6j6V2APyM6temGYNNZ70eZv0hJZ/LMXcoxyjIk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dd3af5c-6887-4ad5-9678-7563dbbd71de", "record_id": "flaws_cloudtrail:0000123:1dd3af5c-6887-4ad5-9678-7563dbbd71de", "row_index": 123, "timestamp": "2017-05-27T05:08:25Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAK7F5C4KR1EE3BCHA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dd3af5c-6887-4ad5-9678-7563dbbd71de", "eventTime": "2017-05-27T05:08:25Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAK7F5C4KR1EE3BCHA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:24Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18a337595-6713-4ebe-8f91-b033c88365", "record_id": "flaws_cloudtrail:0000124:18a337595-6713-4ebe-8f91-b033c88365", "row_index": 124, "timestamp": "2017-05-27T05:08:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18a337595-6713-4ebe-8f91-b033c88365", "eventTime": "2017-05-27T05:08:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAARW6XXHYHOISJD92", "expiration": "May 27, 2017 6:08:25 AM", "sessionToken": "FQoDYXdzECYaDPZfw3NluUOGtHiRaiLMAbRKEaTbXf1hWlVvCTP1WjcJDBrVMc8auwr4LPx3I5Flh33UXKMDZIQOH36CjlaA5NBvJlc6Q786iXCJAJa+Wh7rAD9QYhfM4Qnmz5vkHRj72GsfYCfy9fBYqE2poJ7YR4olrzlKoSrmJufG1qskjKlKgM3D7eSGswJmvzsq/Q0hti3FITQP1nRT20JGYjE5Ps9GIqpdARkpdKAKYoFV+5T2W/EWo5rINp3yqxFhOh4qLW4jAZxpz7imgVm2k6LiXA1II3tlxeOvU31tsCjJk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bca891cb-0d57-4764-b470-de04e185761b1", "record_id": "flaws_cloudtrail:0000125:bca891cb-0d57-4764-b470-de04e185761b1", "row_index": 125, "timestamp": "2017-05-27T05:08:27Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bca891cb-0d57-4764-b470-de04e185761b1", "eventTime": "2017-05-27T05:08:27Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4YK7GUO6C9Z1THIW", "expiration": "May 27, 2017 6:08:27 AM", "sessionToken": "FQoDYXdzECYaDE4o+Si9FvJsgf/pciLMAVKXqU6UPEbEmCxNx84N23J6qHILfh10PcjU6CS9UYniQwpjDwlEl5iQXn22H7w+v2VZwULnyogeA5ks5TRzHQVhtXfLF0QxjcvnmSdNk4TwFLPkK62FljIlYmSvbSkZ1BWqJi2+QhU/w4ZfIEsuC0xRa07caUnHJVfOdINICI1FLtB+/QeIDGxU/i/ZE8TSx/vV3lN97NbPvNlgCArh7iWH8P7qffw9laL3eG59p25WA21hM6YDytrJHoUk4xXGk4+JVCGIWtsPMuCw/yjLk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e073d3c-c378-4988-baf3-83395fff177a", "record_id": "flaws_cloudtrail:0000126:6e073d3c-c378-4988-baf3-83395fff177a", "row_index": 126, "timestamp": "2017-05-27T05:08:27Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e073d3c-c378-4988-baf3-83395fff177a", "eventTime": "2017-05-27T05:08:27Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFIF4LF7VXPVTG8GJ", "expiration": "May 27, 2017 6:08:27 AM", "sessionToken": "FQoDYXdzECYaDKpGAGtJX2UEMUXwmCLMAbBZ1CvQYhttzYM8iSiKUCGCLxBiDKlr56RZaSpwUQuRwClYAeum3mKu/l1FluRwM0kY6R1nHNxdvE4crae8dT0vV6WlEw5sVbIfsVuHNv6NyeI0inCPyCd3SSVII1G8XN+J1nGil/2lbZC8USDV0V0e7xcCoSNQkjFa1CEBARjcD6PDL6ZjXGZxV4m1wOkcoaon274PtjKU0qGlonyeBwknoyC5/rW+yvvZjo/JFd+mOA5fbRggd+G8zrCuzMnbdZPkNWKVMyQMS+P3qSjLk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef34558e-c9cd-4f11-9fec-2b0444178428", "record_id": "flaws_cloudtrail:0000127:ef34558e-c9cd-4f11-9fec-2b0444178428", "row_index": 127, "timestamp": "2017-05-27T05:08:27Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4YK7GUO6C9Z1THIW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef34558e-c9cd-4f11-9fec-2b0444178428", "eventTime": "2017-05-27T05:08:27Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4YK7GUO6C9Z1THIW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:27Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "deb6043e-4c6a-4b23-9167-93a23b41f246", "record_id": "flaws_cloudtrail:0000128:deb6043e-4c6a-4b23-9167-93a23b41f246", "row_index": 128, "timestamp": "2017-05-27T05:08:28Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "deb6043e-4c6a-4b23-9167-93a23b41f246", "eventTime": "2017-05-27T05:08:28Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3WROHNY62R9W2SC9", "expiration": "May 27, 2017 6:08:28 AM", "sessionToken": "FQoDYXdzECYaDDt7Jz0UEsGQLqvafiLMAZuoUil7/fwjIUC3AvwiAjPmGBiCs99MoFBycBY4jiCbLrV++tFEhomIy+eRPI1ommKQ49pilVD5gRpA8OL4OLPk6qiG2XcyIstUKGI9HWIHQ8ERm3jIRTyAzp8S6K40YYQ4VplVK6jzOuRPF2kDVdQSJThamJLjIzAT8G3nQffFxak2oB2MSjI3MYZldVsDqPlsaZYrV/+E88jaLYu5sKtNtDlQw3v/tgbynan/js3ejQ8XhZE8WlW8JWKObj89lCse4h0dRX4mIiXJ0SjMk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2df9ecf8-d448-4c1c-8e60-36651f551af2", "record_id": "flaws_cloudtrail:0000129:2df9ecf8-d448-4c1c-8e60-36651f551af2", "row_index": 129, "timestamp": "2017-05-27T05:08:30Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3WROHNY62R9W2SC9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2df9ecf8-d448-4c1c-8e60-36651f551af2", "eventTime": "2017-05-27T05:08:30Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3WROHNY62R9W2SC9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82598fcf-413c-4c9f-aa60-3c50fdd8ff7a", "record_id": "flaws_cloudtrail:0000130:82598fcf-413c-4c9f-aa60-3c50fdd8ff7a", "row_index": 130, "timestamp": "2017-05-27T05:08:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82598fcf-413c-4c9f-aa60-3c50fdd8ff7a", "eventTime": "2017-05-27T05:08:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0KA7FYP80KAF6KZF", "expiration": "May 27, 2017 6:08:30 AM", "sessionToken": "FQoDYXdzECYaDDdpYPK0/txJIVO/GiLMAdK4TbJKLrn8Kmy01GdFleEds17Dn553ZJ8CwzIlJberw5LX9+ETRCycAFKEdThWRxXCUrnX8bWWpGPYLET/zzKLg4ZeJUGm9tItvp5c4Q0KzuQnI89bQQj/CGF2MWvjsAPo+EN40s5jpgEkW2ME0nxlO2euEs74f5kqeL8s+52dOaMOOEsLVRA37r6fmgKEm1KbuJATz7kJeJ3O9ML0bNLDOWiiHuglshjm3PkQMSEIQrW+9WgaUmqwAuTs+rCyzHZ5/3XHJssWVDXnoCjOk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99b204eb-9d5d-4c11-b99d-c38ed2a8636b", "record_id": "flaws_cloudtrail:0000131:99b204eb-9d5d-4c11-b99d-c38ed2a8636b", "row_index": 131, "timestamp": "2017-05-27T05:08:31Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0KA7FYP80KAF6KZF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99b204eb-9d5d-4c11-b99d-c38ed2a8636b", "eventTime": "2017-05-27T05:08:31Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0KA7FYP80KAF6KZF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:30Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9c4c2c5-c868-4b2f-b280-d160af8d31b2", "record_id": "flaws_cloudtrail:0000132:b9c4c2c5-c868-4b2f-b280-d160af8d31b2", "row_index": 132, "timestamp": "2017-05-27T05:08:31Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9c4c2c5-c868-4b2f-b280-d160af8d31b2", "eventTime": "2017-05-27T05:08:31Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQOLQXKTQ9IRKVY3O", "expiration": "May 27, 2017 6:08:31 AM", "sessionToken": "FQoDYXdzECYaDP6Mntu+3mQEXiwhcyLMAYJ54qUq0y7IoePGGf9Op8hP4dbA80Z7n3DKks+JQwnF1Kwu5TR3iCT0Yj8xpHyaObVTZPiG/GO12UDAQSSd/7DNfogwdxqIvP+E3U7C17l8qSGeyxVhrrcqpnkC0icW9POTDQSKGHfOil3FvhbIuUfwQFq8GdzUxXaF2l6uthn8txzFW7hj/8ke8/3WvmDP/HvOp30c352mULrRQ4ooz4sUWizU37QMTTlz+59yTGGzWD677cSGC2qvH7XxkKCHG+skV9YPzjfpA6mGNSjPk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "359d66b5-fe9d-4206-9cab-5f942b8dfd18", "record_id": "flaws_cloudtrail:0000133:359d66b5-fe9d-4206-9cab-5f942b8dfd18", "row_index": 133, "timestamp": "2017-05-27T05:08:32Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQOLQXKTQ9IRKVY3O", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1001, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "359d66b5-fe9d-4206-9cab-5f942b8dfd18", "eventTime": "2017-05-27T05:08:32Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQOLQXKTQ9IRKVY3O", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29e6c42a-9d8f-488e-b107-6026d924917f5", "record_id": "flaws_cloudtrail:0000134:29e6c42a-9d8f-488e-b107-6026d924917f5", "row_index": 134, "timestamp": "2017-05-27T05:08:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29e6c42a-9d8f-488e-b107-6026d924917f5", "eventTime": "2017-05-27T05:08:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJ1TAIV209RZ9QASM", "expiration": "May 27, 2017 6:08:33 AM", "sessionToken": "FQoDYXdzECYaDM/Ynn9e1jkKA53l1CLMAThKik4FkMmSFtuA9FB2wy/mWLRoSqAoqvlZYX+Xe35zHncyAJN+fDY+wxKa3d7XdXBUAF/xwJCCAHih76c5PBAv7utqO4JFLlSg5yz6Qe97CbJU2l/F3Yv9wAZFxnyeEGMXdS3lMB17JM1yyZMVdsBc5x5E0qLa4mQr8/+03SgsnkXVEULzZa43EokptlufPmivs4erqIJEjLYN9xsovTGvkYdgyEgjfpddCcbKwuMm8Yz8Cbq7MONuBm2owyjUPeDgYUq7k+KJN3HTBijRk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7314a42-e736-47f3-862a-582eaedf7f59", "record_id": "flaws_cloudtrail:0000135:d7314a42-e736-47f3-862a-582eaedf7f59", "row_index": 135, "timestamp": "2017-05-27T05:08:34Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAJ1TAIV209RZ9QASM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7314a42-e736-47f3-862a-582eaedf7f59", "eventTime": "2017-05-27T05:08:34Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAJ1TAIV209RZ9QASM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "439256-99b1-4492-a900-3cdc550216c4", "record_id": "flaws_cloudtrail:0000136:439256-99b1-4492-a900-3cdc550216c4", "row_index": 136, "timestamp": "2017-05-27T05:08:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "439256-99b1-4492-a900-3cdc550216c4", "eventTime": "2017-05-27T05:08:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5WSPILAT75WS3VV7", "expiration": "May 27, 2017 6:08:34 AM", "sessionToken": "FQoDYXdzECYaDCMcYH/Pr0hZHlAVsCLMAfsykY+OIJhgwdww7sELXwoNeIwtaYnS2yhHxg6DPENWAOeEGrADDisG4CpOaOH57MQhG2p5W6me50Bn9JTZ2EDkI5/pXaqKwgo5demi/qB3v1hoGhM42Fp+Mn4iwwKp5EoEjG8qlK/obIuzboHMMMf9HBSqPqrjYJuZJIRPmutjB2VNAZGlOod3/yIgMn8voV5b1/mUPzrTW120tnrLfnN7/lPJGN06j1DaxFKzdKG/AQlb+ZcFKciaR+gs9GUa8QbCXug9oheaZmuuKijSk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f00bd264-8d24-4e3d-954a-49113b73ad96", "record_id": "flaws_cloudtrail:0000137:f00bd264-8d24-4e3d-954a-49113b73ad96", "row_index": 137, "timestamp": "2017-05-27T05:08:35Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5WSPILAT75WS3VV7", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f00bd264-8d24-4e3d-954a-49113b73ad96", "eventTime": "2017-05-27T05:08:35Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5WSPILAT75WS3VV7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5d7b4e2-cfc3-49cb-b320-9e3b15f5603e", "record_id": "flaws_cloudtrail:0000138:b5d7b4e2-cfc3-49cb-b320-9e3b15f5603e", "row_index": 138, "timestamp": "2017-05-27T05:08:36Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5WSPILAT75WS3VV7", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5d7b4e2-cfc3-49cb-b320-9e3b15f5603e", "eventTime": "2017-05-27T05:08:36Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5WSPILAT75WS3VV7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db43145-63d8-4c03-9a63-e4584c4f1653", "record_id": "flaws_cloudtrail:0000139:db43145-63d8-4c03-9a63-e4584c4f1653", "row_index": 139, "timestamp": "2017-05-27T05:08:38Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5WSPILAT75WS3VV7", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db43145-63d8-4c03-9a63-e4584c4f1653", "eventTime": "2017-05-27T05:08:38Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5WSPILAT75WS3VV7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a26fb2e8-0afa-4163-922e-0f422c54b00b", "record_id": "flaws_cloudtrail:0000140:a26fb2e8-0afa-4163-922e-0f422c54b00b", "row_index": 140, "timestamp": "2017-05-27T05:08:39Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5WSPILAT75WS3VV7", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a26fb2e8-0afa-4163-922e-0f422c54b00b", "eventTime": "2017-05-27T05:08:39Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5WSPILAT75WS3VV7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "385bca81-3504-4bb9-b984-560c97c6c0f9", "record_id": "flaws_cloudtrail:0000141:385bca81-3504-4bb9-b984-560c97c6c0f9", "row_index": 141, "timestamp": "2017-05-27T05:08:40Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5WSPILAT75WS3VV7", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "385bca81-3504-4bb9-b984-560c97c6c0f9", "eventTime": "2017-05-27T05:08:40Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5WSPILAT75WS3VV7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "948234a5-b125-447e-b70c-3aaad6b421be", "record_id": "flaws_cloudtrail:0000142:948234a5-b125-447e-b70c-3aaad6b421be", "row_index": 142, "timestamp": "2017-05-27T05:08:41Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5WSPILAT75WS3VV7", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "948234a5-b125-447e-b70c-3aaad6b421be", "eventTime": "2017-05-27T05:08:41Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5WSPILAT75WS3VV7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fec53dbf-be7d-403a-a05e-17308edcd5e9", "record_id": "flaws_cloudtrail:0000143:fec53dbf-be7d-403a-a05e-17308edcd5e9", "row_index": 143, "timestamp": "2017-05-27T05:08:42Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5WSPILAT75WS3VV7", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fec53dbf-be7d-403a-a05e-17308edcd5e9", "eventTime": "2017-05-27T05:08:42Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5WSPILAT75WS3VV7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efd0c82c-1ad7-43cc-b1ab-68b6561d26fb", "record_id": "flaws_cloudtrail:0000144:efd0c82c-1ad7-43cc-b1ab-68b6561d26fb", "row_index": 144, "timestamp": "2017-05-27T05:08:43Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5WSPILAT75WS3VV7", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efd0c82c-1ad7-43cc-b1ab-68b6561d26fb", "eventTime": "2017-05-27T05:08:43Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5WSPILAT75WS3VV7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b601e862-1ecc-42c5-8235-3129b85fbc3f", "record_id": "flaws_cloudtrail:0000145:b601e862-1ecc-42c5-8235-3129b85fbc3f", "row_index": 145, "timestamp": "2017-05-27T05:08:44Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5WSPILAT75WS3VV7", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b601e862-1ecc-42c5-8235-3129b85fbc3f", "eventTime": "2017-05-27T05:08:44Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5WSPILAT75WS3VV7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "426b2d57-c7fc-4e71-a72f-c15f10dd13a4", "record_id": "flaws_cloudtrail:0000146:426b2d57-c7fc-4e71-a72f-c15f10dd13a4", "row_index": 146, "timestamp": "2017-05-27T05:08:45Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5WSPILAT75WS3VV7", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "426b2d57-c7fc-4e71-a72f-c15f10dd13a4", "eventTime": "2017-05-27T05:08:45Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5WSPILAT75WS3VV7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6d3a73d-28ff-4ef2-8906-06f1334cdf6c", "record_id": "flaws_cloudtrail:0000147:b6d3a73d-28ff-4ef2-8906-06f1334cdf6c", "row_index": 147, "timestamp": "2017-05-27T05:08:45Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5WSPILAT75WS3VV7", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6d3a73d-28ff-4ef2-8906-06f1334cdf6c", "eventTime": "2017-05-27T05:08:45Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5WSPILAT75WS3VV7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45980a1-ff76-4592-90d1-23eee01eac1f", "record_id": "flaws_cloudtrail:0000148:45980a1-ff76-4592-90d1-23eee01eac1f", "row_index": 148, "timestamp": "2017-05-27T05:08:46Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5WSPILAT75WS3VV7", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45980a1-ff76-4592-90d1-23eee01eac1f", "eventTime": "2017-05-27T05:08:46Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5WSPILAT75WS3VV7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f62619b-6123-442f-962e-ed6d2528bcde", "record_id": "flaws_cloudtrail:0000149:f62619b-6123-442f-962e-ed6d2528bcde", "row_index": 149, "timestamp": "2017-05-27T05:08:46Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5WSPILAT75WS3VV7", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f62619b-6123-442f-962e-ed6d2528bcde", "eventTime": "2017-05-27T05:08:46Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5WSPILAT75WS3VV7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d173ae31-6007-4442-9a91-b1ccdc5a1576", "record_id": "flaws_cloudtrail:0000150:d173ae31-6007-4442-9a91-b1ccdc5a1576", "row_index": 150, "timestamp": "2017-05-27T05:08:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d173ae31-6007-4442-9a91-b1ccdc5a1576", "eventTime": "2017-05-27T05:08:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYLBXPNUH6JLRAURX", "expiration": "May 27, 2017 6:08:47 AM", "sessionToken": "FQoDYXdzECYaDBCnoOTL5Pz1wDl7SSLMAZ1qeLEZxl7aIcf2mzC0uLkX/SZ97MI5M9xWE1mvrmqlK6ecTzRtV+5s/W/ondEMjbrt0wsllnX2e4nRG7eYUNQ9S9QQM5WMBXsy5jKOP/2VJ8ElNG6ApzQnQ6sQWSnyjKeK56K8CytQz//fr8ILwM5GY4sODnJTpGrq3IXgOAUW7/ZaxaZfCbwI/uglZ0KGM9KazAitiC33ZQdvNTlKGsckX9ZNkbyjh/6rNLTV5G7VUxdCeTfF7OhwP1Ojbhs/T0N7AvINhPZOYgS3qSjfk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34442-dee9-48bc-8dc3-fcea7f3d50a6", "record_id": "flaws_cloudtrail:0000151:34442-dee9-48bc-8dc3-fcea7f3d50a6", "row_index": 151, "timestamp": "2017-05-27T05:08:47Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5WSPILAT75WS3VV7", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34442-dee9-48bc-8dc3-fcea7f3d50a6", "eventTime": "2017-05-27T05:08:47Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5WSPILAT75WS3VV7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "321f2903-7d8a-4c41-807c-de222f31136c", "record_id": "flaws_cloudtrail:0000152:321f2903-7d8a-4c41-807c-de222f31136c", "row_index": 152, "timestamp": "2017-05-27T05:08:48Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYLBXPNUH6JLRAURX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "321f2903-7d8a-4c41-807c-de222f31136c", "eventTime": "2017-05-27T05:08:48Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYLBXPNUH6JLRAURX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5462b5b-1f1c-4899-a8b5-fe660810d6a1", "record_id": "flaws_cloudtrail:0000153:b5462b5b-1f1c-4899-a8b5-fe660810d6a1", "row_index": 153, "timestamp": "2017-05-27T05:08:49Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYLBXPNUH6JLRAURX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5462b5b-1f1c-4899-a8b5-fe660810d6a1", "eventTime": "2017-05-27T05:08:49Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYLBXPNUH6JLRAURX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88e332b4-8fec-4d66-ad54-ff94ec2b396a", "record_id": "flaws_cloudtrail:0000154:88e332b4-8fec-4d66-ad54-ff94ec2b396a", "row_index": 154, "timestamp": "2017-05-27T05:08:50Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYLBXPNUH6JLRAURX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88e332b4-8fec-4d66-ad54-ff94ec2b396a", "eventTime": "2017-05-27T05:08:50Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYLBXPNUH6JLRAURX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d68f506-0c59-49a1-ac79-670f5c810978a", "record_id": "flaws_cloudtrail:0000155:2d68f506-0c59-49a1-ac79-670f5c810978a", "row_index": 155, "timestamp": "2017-05-27T05:08:52Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYLBXPNUH6JLRAURX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d68f506-0c59-49a1-ac79-670f5c810978a", "eventTime": "2017-05-27T05:08:52Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYLBXPNUH6JLRAURX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e206afcf-1680-4f72-94a5-37b872e9eaee", "record_id": "flaws_cloudtrail:0000156:e206afcf-1680-4f72-94a5-37b872e9eaee", "row_index": 156, "timestamp": "2017-05-27T05:08:53Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYLBXPNUH6JLRAURX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e206afcf-1680-4f72-94a5-37b872e9eaee", "eventTime": "2017-05-27T05:08:53Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYLBXPNUH6JLRAURX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26c25f0d-83c5-48f3-a413-503590bbb5fb", "record_id": "flaws_cloudtrail:0000157:26c25f0d-83c5-48f3-a413-503590bbb5fb", "row_index": 157, "timestamp": "2017-05-27T05:08:53Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYLBXPNUH6JLRAURX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26c25f0d-83c5-48f3-a413-503590bbb5fb", "eventTime": "2017-05-27T05:08:53Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYLBXPNUH6JLRAURX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "076b14b5-c8db-41da-be83-19178daa06a9", "record_id": "flaws_cloudtrail:0000158:076b14b5-c8db-41da-be83-19178daa06a9", "row_index": 158, "timestamp": "2017-05-27T05:08:54Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYLBXPNUH6JLRAURX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "076b14b5-c8db-41da-be83-19178daa06a9", "eventTime": "2017-05-27T05:08:54Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYLBXPNUH6JLRAURX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a0e40cf-a9a3-47b3-8448-03174b92", "record_id": "flaws_cloudtrail:0000159:7a0e40cf-a9a3-47b3-8448-03174b92", "row_index": 159, "timestamp": "2017-05-27T05:08:55Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYLBXPNUH6JLRAURX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a0e40cf-a9a3-47b3-8448-03174b92", "eventTime": "2017-05-27T05:08:55Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYLBXPNUH6JLRAURX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb307079-8d79-4266-bda6-ef51bbea3c40", "record_id": "flaws_cloudtrail:0000160:eb307079-8d79-4266-bda6-ef51bbea3c40", "row_index": 160, "timestamp": "2017-05-27T05:08:56Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYLBXPNUH6JLRAURX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb307079-8d79-4266-bda6-ef51bbea3c40", "eventTime": "2017-05-27T05:08:56Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYLBXPNUH6JLRAURX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "439c72c7-1ba2-4ec4-9b2d-5cea54baa111", "record_id": "flaws_cloudtrail:0000161:439c72c7-1ba2-4ec4-9b2d-5cea54baa111", "row_index": 161, "timestamp": "2017-05-27T05:08:57Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYLBXPNUH6JLRAURX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "439c72c7-1ba2-4ec4-9b2d-5cea54baa111", "eventTime": "2017-05-27T05:08:57Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYLBXPNUH6JLRAURX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "298f8a12-8519-40f5-a9ba-ce2f101b5228", "record_id": "flaws_cloudtrail:0000162:298f8a12-8519-40f5-a9ba-ce2f101b5228", "row_index": 162, "timestamp": "2017-05-27T05:08:57Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYLBXPNUH6JLRAURX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "298f8a12-8519-40f5-a9ba-ce2f101b5228", "eventTime": "2017-05-27T05:08:57Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYLBXPNUH6JLRAURX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb37cc08-4b5e-4ba8-9bf5-2968df5a5722", "record_id": "flaws_cloudtrail:0000163:bb37cc08-4b5e-4ba8-9bf5-2968df5a5722", "row_index": 163, "timestamp": "2017-05-27T05:08:58Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYLBXPNUH6JLRAURX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb37cc08-4b5e-4ba8-9bf5-2968df5a5722", "eventTime": "2017-05-27T05:08:58Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYLBXPNUH6JLRAURX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17862-3c6a-49a5-b04e-226bdf94efef", "record_id": "flaws_cloudtrail:0000164:17862-3c6a-49a5-b04e-226bdf94efef", "row_index": 164, "timestamp": "2017-05-27T05:08:58Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYLBXPNUH6JLRAURX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17862-3c6a-49a5-b04e-226bdf94efef", "eventTime": "2017-05-27T05:08:58Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYLBXPNUH6JLRAURX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ae3ef21-f233-4334-8c99-efa1cd91f924", "record_id": "flaws_cloudtrail:0000165:2ae3ef21-f233-4334-8c99-efa1cd91f924", "row_index": 165, "timestamp": "2017-05-27T05:08:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ae3ef21-f233-4334-8c99-efa1cd91f924", "eventTime": "2017-05-27T05:08:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAO0TSNQMZ1RHJYK0N", "expiration": "May 27, 2017 6:08:59 AM", "sessionToken": "FQoDYXdzECYaDOknEVur0YjBu3OppiLMAXR4M7hZcDKTt+4sRGZi8c+JfAGFYh4Jir3S1mApudF4p8LEhxtZ43lVGd8U+nCPHrFN3cF9mHCE6nqLF4IdbFNzZOOSKh3N9VUObwuhzwg4e5EsUawgIrJMKSi/nT8VZLOsUqx1RmnziaOLX/rOR6QVyrfEVGw2dmzSdgT9WZ73A/ksT4lSJY8Cky+ev/nyLuQF8/uQVAbyi5xea+P3j+RzYAb7yo/1dwPjVHEssUMVYHYKSMxVtbf0qtU5E9yzG5SbUOcyfc+nWjd75yjrk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b7c80e4-7b19-4d18-a0d8-c8dce1b30f6b", "record_id": "flaws_cloudtrail:0000166:1b7c80e4-7b19-4d18-a0d8-c8dce1b30f6b", "row_index": 166, "timestamp": "2017-05-27T05:08:59Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAO0TSNQMZ1RHJYK0N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b7c80e4-7b19-4d18-a0d8-c8dce1b30f6b", "eventTime": "2017-05-27T05:08:59Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAO0TSNQMZ1RHJYK0N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:59Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "406472c1-fb15-404f-9820-3d39e25c4aee", "record_id": "flaws_cloudtrail:0000167:406472c1-fb15-404f-9820-3d39e25c4aee", "row_index": 167, "timestamp": "2017-05-27T05:08:59Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYLBXPNUH6JLRAURX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "406472c1-fb15-404f-9820-3d39e25c4aee", "eventTime": "2017-05-27T05:08:59Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYLBXPNUH6JLRAURX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:08:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e9aa037-2f45-42e2-971b-0c38a27864fe", "record_id": "flaws_cloudtrail:0000168:5e9aa037-2f45-42e2-971b-0c38a27864fe", "row_index": 168, "timestamp": "2017-05-27T05:09:00Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e9aa037-2f45-42e2-971b-0c38a27864fe", "eventTime": "2017-05-27T05:09:00Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIANLTQHGRMX9Q07P3K", "expiration": "May 27, 2017 6:09:00 AM", "sessionToken": "FQoDYXdzECYaDEmQcRKqJCJlZ3rgySLMASzgIIN1jdV++pC5GZWHH+rxgAPi8XtVZg+AbVrFzPcOLd7I4wqLKAkZ6pmm28OPuI03sgp9oP85W9w5/tRiRwlgjx3YQRTDI+5M4U4Wh7p7K1nAjmkCwhOhNL8e6E96tmFjWgcfVFGwoqvR0c1HtF3Bfj3U4zUK2cJ5Ov1YQeQKzkk7R1aAhvpzoybBoK0OVTsF1HJh0WUeWqKrkszivLHqKPDspnoZuWsURrMYBtMh6l3zCUfyizdDT52gkLT9lXqLBclS/0du3mceUCjsk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bc320011-8a46-47b1-b389-290fcde9982c", "record_id": "flaws_cloudtrail:0000169:6bc320011-8a46-47b1-b389-290fcde9982c", "row_index": 169, "timestamp": "2017-05-27T05:09:00Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIANLTQHGRMX9Q07P3K", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bc320011-8a46-47b1-b389-290fcde9982c", "eventTime": "2017-05-27T05:09:00Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIANLTQHGRMX9Q07P3K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:00Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "274895e80-4213-4471-89a2-daa19f82c055", "record_id": "flaws_cloudtrail:0000170:274895e80-4213-4471-89a2-daa19f82c055", "row_index": 170, "timestamp": "2017-05-27T05:09:01Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8UBXZWQJWPG4KJNQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "274895e80-4213-4471-89a2-daa19f82c055", "eventTime": "2017-05-27T05:09:01Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8UBXZWQJWPG4KJNQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3324d2be-b9c4-4bd8-888b-597504e95496", "record_id": "flaws_cloudtrail:0000171:3324d2be-b9c4-4bd8-888b-597504e95496", "row_index": 171, "timestamp": "2017-05-27T05:09:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3324d2be-b9c4-4bd8-888b-597504e95496", "eventTime": "2017-05-27T05:09:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8UBXZWQJWPG4KJNQ", "expiration": "May 27, 2017 6:09:01 AM", "sessionToken": "FQoDYXdzECYaDJQKOMUwmVWxEFgUQyLMAS5W1ZMJ6FYyeYWfPItjSY34oHPPTym7VaGh2IYNkp4cPa5+SyJW2E5/v278DN92Qq6tk4Ah4M0dpNx14h01sJVfWysBywbneySR9vhptCUyHlLT6lY7CwpUPCGxRgTHjLnkJEzEHIedCzpJGZP5Nq4rMn9wqG9i3bq7+CrAZVHSvRnqFBLfNh11IP8WAMnugemqqmr3eSTxkZSSjJx8V3ZEIZWsalnA7oQmkRh/UobJ23HUq6Rjnh32KdcxZW4gnai/89Mncm5FvcHBhyjtk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c949b4df-2765-4f07-990b-cae5b3e28749", "record_id": "flaws_cloudtrail:0000172:c949b4df-2765-4f07-990b-cae5b3e28749", "row_index": 172, "timestamp": "2017-05-27T05:09:02Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c949b4df-2765-4f07-990b-cae5b3e28749", "eventTime": "2017-05-27T05:09:02Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4QI12CCH7E5AURE8", "expiration": "May 27, 2017 6:09:02 AM", "sessionToken": "FQoDYXdzECYaDNXcixUtWneIDw0eGSLMAUa6sG47ZamL0I+rBXJ5ZuCWvUaKB+Vb+Ziz9a/676+KZwKTGTxdhILDHql8Vgym/v3ZAb2LmgzS10VKG/3PgMZnsttHAw4dSQVR0Gnp4shUpi21K+QxK3tpHKYUcTY7ppLrNEhBIinPL77lo+iL52gNyDsLSXK1IdIMdakic0xZEgvZQ7wkSb0BhBLt2RiHRX6D9Cl8Ds5nuOAUugrzz98k8rpdIdnYVjrDOEKPkpQJRQUps8KpAoqSFB3P2XyHZy1p8H1wQOxTrubuQyjuk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bca678d6-52cd-4676-9823-69b03bc680be", "record_id": "flaws_cloudtrail:0000173:bca678d6-52cd-4676-9823-69b03bc680be", "row_index": 173, "timestamp": "2017-05-27T05:09:03Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4QI12CCH7E5AURE8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bca678d6-52cd-4676-9823-69b03bc680be", "eventTime": "2017-05-27T05:09:03Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4QI12CCH7E5AURE8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7f6f20f-0475-482d-aa36-cc42158dba95", "record_id": "flaws_cloudtrail:0000174:a7f6f20f-0475-482d-aa36-cc42158dba95", "row_index": 174, "timestamp": "2017-05-27T05:09:03Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7f6f20f-0475-482d-aa36-cc42158dba95", "eventTime": "2017-05-27T05:09:03Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAEYEXW6NSTGNMX1BY", "expiration": "May 27, 2017 6:09:03 AM", "sessionToken": "FQoDYXdzECYaDGnaId/5TZ95axUCnCLMAfTOhXaQvIA6ZJbO03PmxgZC4hM3200wrhhznT7ASbRfGR/5jykMcgJndKeFu8rhINgNfXZw71rR3xqe4ZLKHLmlKMhVyQMD0LIFu9wEBIhCXN/YsHpV58J6XLSI8HNNpxX1P1KnqVIiM9YbQOSjpY5VvMeWcqi36x3Urd7wdGDJTRgJV6lv+pUrVUMC5XqhMV7Jf2d5/JZVyrPtx7EA03vqzrRZgJBocJJMRR6sFdzQ6emzIMIS9eUXeVAdlnuhLWwv/+TiniRiskCD8yjvk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d09ac0e-77e9-4656-b192-0088d63ac3e1", "record_id": "flaws_cloudtrail:0000175:6d09ac0e-77e9-4656-b192-0088d63ac3e1", "row_index": 175, "timestamp": "2017-05-27T05:09:04Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEYEXW6NSTGNMX1BY", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d09ac0e-77e9-4656-b192-0088d63ac3e1", "eventTime": "2017-05-27T05:09:04Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEYEXW6NSTGNMX1BY", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b90ae8a-0e28-4983-96a5-87b4e6e04365", "record_id": "flaws_cloudtrail:0000176:2b90ae8a-0e28-4983-96a5-87b4e6e04365", "row_index": 176, "timestamp": "2017-05-27T05:09:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b90ae8a-0e28-4983-96a5-87b4e6e04365", "eventTime": "2017-05-27T05:09:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJ79T0JL6UWJ50HWN", "expiration": "May 27, 2017 6:09:05 AM", "sessionToken": "FQoDYXdzECYaDCOO2oe9bS5Jb/MTbiLMAcM7ff71pEgqb+oRT3dWJtJaH8Pr0NGFLRf9DrailXmDM4IBBSdvvooyPzdwqOvrSmqitqbUf6sCVIHBF5NFPrJpS80M5xZUcl31pNb9BCLctJrFxUYTpcpui239bPrLNeIdCiNMkPNEsjXA7HBnkD7VflTSoqQ25iKbZCHVaWR8sMPz9HPIGAU2WVklAqRaWgfa22ikTNaCj3zISmbynMRSWgfmS0G71oRrHAxl/zT5kiWe4gfXKjoys356jYI4CiL3Ev7H/H6W1eGynijxk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd54eb82-71a6-449b-ab89-f47ac927759a", "record_id": "flaws_cloudtrail:0000177:fd54eb82-71a6-449b-ab89-f47ac927759a", "row_index": 177, "timestamp": "2017-05-27T05:09:06Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAJ79T0JL6UWJ50HWN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd54eb82-71a6-449b-ab89-f47ac927759a", "eventTime": "2017-05-27T05:09:06Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAJ79T0JL6UWJ50HWN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce3e3dc7-ca73-462c-ae43-4b6e0dd9ebc4", "record_id": "flaws_cloudtrail:0000178:ce3e3dc7-ca73-462c-ae43-4b6e0dd9ebc4", "row_index": 178, "timestamp": "2017-05-27T05:09:06Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce3e3dc7-ca73-462c-ae43-4b6e0dd9ebc4", "eventTime": "2017-05-27T05:09:06Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA87MSO00T7K02J89T", "expiration": "May 27, 2017 6:09:06 AM", "sessionToken": "FQoDYXdzECYaDLDstY6vO+erbfiRoiLMAQL/ImHjboTYQLpyQH/EaMTlDulTSgZg05uiGaQtFT32Dv+AvwcGz/pQXI07g50AUsh96DiA913Wxi68x2fS3TXTwvPeUr7ROvrrsKx/ZS3sZKu9BWfml2DeHZJUsxPzQoZsYZLhUUbHgeWb874e28JR2Kz91mNNWvv6VV5mfcV2eTw2Va+j0T80Oxu8ECCPTYUeHk4+9SLon7GKYceI8cGC6R/LF7Dyo6HEVGtzgAIYUF4qCNdjaQnbZDe9OhtKthGRHbUT8HjVC39rBCjyk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e521708b-1cd1-4da0-9cee-ca911035dc8f", "record_id": "flaws_cloudtrail:0000179:6e521708b-1cd1-4da0-9cee-ca911035dc8f", "row_index": 179, "timestamp": "2017-05-27T05:09:07Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e521708b-1cd1-4da0-9cee-ca911035dc8f", "eventTime": "2017-05-27T05:09:07Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGJYIKAXZNY6Z65K1", "expiration": "May 27, 2017 6:09:07 AM", "sessionToken": "FQoDYXdzECYaDBDillI2oQKFo0jUwiLMAWZRbWUYe14M/tP5T69YsW0r40KBbPmocLSQ7QAyWFNdvaLbFIfOfkPfzmXbOKZveeucliSHm8Jmdcdd++qCPfa8Rr/QlpqX7mVx4aP7WhaCp7ASelH2YS7u0XZ5DzCqk0Th26N5MLWdBtRhkifu5FoL3zTbVr78tZ7ChmpOZgE9YBKSKL4mNBl0A01s0P3454T0tBiMaPo6wC1uOfS6Qt9JBz1ol3RUzJEeHqB9IZJ/VZBdaBJ1w20VhU4Ev53GcodyxQIvDbEI3U0YIyjzk6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "496197-7d77-4fd6-b188-8767f7bf42b3", "record_id": "flaws_cloudtrail:0000180:496197-7d77-4fd6-b188-8767f7bf42b3", "row_index": 180, "timestamp": "2017-05-27T05:09:07Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA87MSO00T7K02J89T", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "496197-7d77-4fd6-b188-8767f7bf42b3", "eventTime": "2017-05-27T05:09:07Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA87MSO00T7K02J89T", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bde490b-c948-43bc-bd12-54e1e70110a4", "record_id": "flaws_cloudtrail:0000181:1bde490b-c948-43bc-bd12-54e1e70110a4", "row_index": 181, "timestamp": "2017-05-27T05:09:08Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAGJYIKAXZNY6Z65K1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bde490b-c948-43bc-bd12-54e1e70110a4", "eventTime": "2017-05-27T05:09:08Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAGJYIKAXZNY6Z65K1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:07Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3c7d115-48d2-4389-80d8-527232bd6da", "record_id": "flaws_cloudtrail:0000182:f3c7d115-48d2-4389-80d8-527232bd6da", "row_index": 182, "timestamp": "2017-05-27T05:09:09Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIADNY34IN6CBZEINEI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3c7d115-48d2-4389-80d8-527232bd6da", "eventTime": "2017-05-27T05:09:09Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIADNY34IN6CBZEINEI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:09Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8242a89d-454c-412b-b9ed-b46660039be7", "record_id": "flaws_cloudtrail:0000183:8242a89d-454c-412b-b9ed-b46660039be7", "row_index": 183, "timestamp": "2017-05-27T05:09:09Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8242a89d-454c-412b-b9ed-b46660039be7", "eventTime": "2017-05-27T05:09:09Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIASHFP3919DUD71D5N", "expiration": "May 27, 2017 6:09:09 AM", "sessionToken": "FQoDYXdzECYaDJqOsfZjL3UHlkdBViLMAX+dvWCAIyVCDFQW4nuJhEvWGmk6UoejS4rP0/UMgpS2nYKi0NywV6v0KWYUEscZtd7dsspoBiR+WnKb1uHjEGuoEpXE9JFjDzlNC+XWNQK8E7GykS3d+jsUXSD7CyQ8+CZtEce53+/Tt8/ZbAaCJjYuFhrH+h5h8SwD4A6OkRQmUHE/Xrbktr04TPp6XMu1Er980gwZL2FdHyFrA8AzJGoFq84mzhqyxqOStXD4mOrI7FXNwnmS2NYOEPLoaXZ2BjgOjk4ex5mfDbeNkyj1k6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ed613ca-e302-4341-839b-c0f9abc83c34", "record_id": "flaws_cloudtrail:0000184:2ed613ca-e302-4341-839b-c0f9abc83c34", "row_index": 184, "timestamp": "2017-05-27T05:09:09Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ed613ca-e302-4341-839b-c0f9abc83c34", "eventTime": "2017-05-27T05:09:09Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIADNY34IN6CBZEINEI", "expiration": "May 27, 2017 6:09:09 AM", "sessionToken": "FQoDYXdzECYaDIraKY6tPMuy0rrhgSLMAYAPVe8CYv1n2HycJKu63XvZPuuXp02PGqKc9Ru1WKu5jCT1w14B8b1ff5AZLn1FHn4VwYcB0aZ6JXnUatRnDEiCPnkje0qdw0uXUZ4UOMCFXUUgYSL5KN0vZv+F/e4a1X4HLlh+uc/SPOC9U7s0mW2PXlpfWTx7nKW4sTGbURrNvFQ9XfWCYbzxWjrHx7aqw6VJOp+KL3Ohzlw3RBpq3sQKji5PZAWD/fGj7MFumeCuq21wiSQAr3FY0ha7/QwJZ2O/qxxtdDGj0esbTij1k6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ce81e5a-0550-41a8-9b41-c3841b253fc8", "record_id": "flaws_cloudtrail:0000185:4ce81e5a-0550-41a8-9b41-c3841b253fc8", "row_index": 185, "timestamp": "2017-05-27T05:09:11Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ce81e5a-0550-41a8-9b41-c3841b253fc8", "eventTime": "2017-05-27T05:09:11Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0TN7XI4QTOP0HL39", "expiration": "May 27, 2017 6:09:11 AM", "sessionToken": "FQoDYXdzECYaDAEJrYfM3msCvV2miiLMAUA7aXM/pu+Wryw/tm/O3B46Ua5I8F8WPOb115O22UXTPCwyfo7BPeIJBENLPxTT1zKs2noBuN+7A+IpwGVttyaG3AgBRnvUz7uzJQzf4joO+hfzNQdJXAf0zaA+RnEShTEYn1Nsentp74A9ureVAtKE+ln1pFOF2Yke26R60hJSLe8YbXuJZCkaHTuuGyxRkyURtgyxsb4vUYahJSEM/O/i61JP6ZAIhtPZ9wzMvNJZ7c9mz6GisGVOuByRTIAWGrlUfPRtKYAHpYiOmyj3k6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a15dd65-6a24-47c4-9a18-a803f2b5ce74", "record_id": "flaws_cloudtrail:0000186:3a15dd65-6a24-47c4-9a18-a803f2b5ce74", "row_index": 186, "timestamp": "2017-05-27T05:09:11Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a15dd65-6a24-47c4-9a18-a803f2b5ce74", "eventTime": "2017-05-27T05:09:11Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKCD0NS0S9ITC954X", "expiration": "May 27, 2017 6:09:11 AM", "sessionToken": "FQoDYXdzECYaDNsGM/dTHqY02nHbXCLMASl2nIZbBIzl0s2eWMgrTgX5B2Zn1JWhQxx3guQyPTT2wgjaa7BzRfD7FNotXvKGLHIgUIAfjWb17CyWYJ51Js7NVpN6ssSfrNiqf+itZOgKelxCdtng2sA2JDYDxGBblD+cg4+QDS1iCFmwWYremUe+rPGfRZ1ItA+9yyjyRd0ds9SHXU1/3FlwXnDTK6b4RWhVPbunjjwZCgbqmkJ+iR16fFzh3h9EcRNfFJIZh3EzWLaaR0rM6BkmE4E4QpBsxUkIDcedARG0YBWaFyj3k6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b94413-6450-489f-a861-58bf23546c3", "record_id": "flaws_cloudtrail:0000187:9b94413-6450-489f-a861-58bf23546c3", "row_index": 187, "timestamp": "2017-05-27T05:09:11Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKCD0NS0S9ITC954X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b94413-6450-489f-a861-58bf23546c3", "eventTime": "2017-05-27T05:09:11Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKCD0NS0S9ITC954X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:11Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97805a04-ff09-40fc-ba50-9c7ec0ae3cc2", "record_id": "flaws_cloudtrail:0000188:97805a04-ff09-40fc-ba50-9c7ec0ae3cc2", "row_index": 188, "timestamp": "2017-05-27T05:09:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97805a04-ff09-40fc-ba50-9c7ec0ae3cc2", "eventTime": "2017-05-27T05:09:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIANBOKHKPCCBT81UO9", "expiration": "May 27, 2017 6:09:12 AM", "sessionToken": "FQoDYXdzECYaDHykzrp2tYPjYtYThSLMAR+DTPN8LGy3oNvg+ewNrV2mWrwaLvh6BJPM85saJ3B7EHr7uyAzk5fmKqNSx4HRy6lkAGNk5FpILJt5DfI7DqI0/Naj1A4BYoMmKrkXr8wN9PHPA7s1AodzXrUTNc6Ur1Hp5/jkkwaX42pghNmFXgE1T813OhME28xsVBHUEfAerql1b9GpUYWfjm8oBz0ieHSsQZvYQAqPU58u2URbTXkozFsbCc5uIJNJxkg5YdUwbkoct8tEDO/OTFjhGle5HtMZaWFlwdN0P08mGyj4k6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7970eede-5238-4885-bad6-86f55b55f6c9", "record_id": "flaws_cloudtrail:0000189:7970eede-5238-4885-bad6-86f55b55f6c9", "row_index": 189, "timestamp": "2017-05-27T05:09:14Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIANBOKHKPCCBT81UO9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7970eede-5238-4885-bad6-86f55b55f6c9", "eventTime": "2017-05-27T05:09:14Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIANBOKHKPCCBT81UO9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e704412d-edc6-4136-be32-8875dac9b24c", "record_id": "flaws_cloudtrail:0000190:e704412d-edc6-4136-be32-8875dac9b24c", "row_index": 190, "timestamp": "2017-05-27T05:09:14Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e704412d-edc6-4136-be32-8875dac9b24c", "eventTime": "2017-05-27T05:09:14Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1CKLZPZJQ7K56XBH", "expiration": "May 27, 2017 6:09:14 AM", "sessionToken": "FQoDYXdzECYaDMjzw+yb1/ftbOqeFyLMAZEpZCoum1uLXckP5LTvRdmhXLd25jl02SlRxflCa0v+HQ9r0M2L8/RvDS/o5uYwoUPn6a+PDmIDT6nqhiQBsXackSGqXXKXltV6DbRcU5Cqc4+Kk1zP23+nkgFxzgpbCoFKhLsJ9qhhFnh296eZeeNUM/luELl07zZFyAY2VClFWyh7vaRqSiorBw20Oe3gYvcCBMI7BUOraTOOiUZxy+ZbKQhehFxTbcmDBcfq7FMwYNVvENpuAVZr64YwLxcwJIzn27snWAGGjb/C0yj6k6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6b6af5e-654c-457e-83d5-4e461e036b74", "record_id": "flaws_cloudtrail:0000191:f6b6af5e-654c-457e-83d5-4e461e036b74", "row_index": 191, "timestamp": "2017-05-27T05:09:15Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1CKLZPZJQ7K56XBH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6b6af5e-654c-457e-83d5-4e461e036b74", "eventTime": "2017-05-27T05:09:15Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1CKLZPZJQ7K56XBH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:14Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26504-7a1b-435a-8d05-a550c2a8a5c4", "record_id": "flaws_cloudtrail:0000192:26504-7a1b-435a-8d05-a550c2a8a5c4", "row_index": 192, "timestamp": "2017-05-27T05:09:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26504-7a1b-435a-8d05-a550c2a8a5c4", "eventTime": "2017-05-27T05:09:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIANKV3CIIL4XOR9Y47", "expiration": "May 27, 2017 6:09:15 AM", "sessionToken": "FQoDYXdzECYaDOXZrDv3U/4Cyp/D5iLMAaiac4JASMKLsYkekFb9bv3dPO0SLFfvopzHjH0Nzkt4/V8KI+Xkv1cXK/Jl70X8823z0ADZP/oDe85YMCYLPupyUwLsr8ZzZO7PvGFgicTO7iGqyndrwUJG0r/b5HKQZ1i3GT2LPJABVFzPP5q3kDvsDlI2bxP8uZtxvafN0ze5irOymenm7GZu8XI0tT3OoWh4RuZZW3FEOyoeBC0hg76cHwi18qmlHEH+G8fNLrSiX5uFN0m3G7BFoD/lzeE2NnMC7GogSPUXp0Y76Cj7k6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8165aa9-fde7-47cd-83f3-195dd2e30ceb", "record_id": "flaws_cloudtrail:0000193:c8165aa9-fde7-47cd-83f3-195dd2e30ceb", "row_index": 193, "timestamp": "2017-05-27T05:09:16Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIANKV3CIIL4XOR9Y47", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8165aa9-fde7-47cd-83f3-195dd2e30ceb", "eventTime": "2017-05-27T05:09:16Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIANKV3CIIL4XOR9Y47", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65b08d9a-e9ec-429b-8377-f03c171d1098", "record_id": "flaws_cloudtrail:0000194:65b08d9a-e9ec-429b-8377-f03c171d1098", "row_index": 194, "timestamp": "2017-05-27T05:09:16Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65b08d9a-e9ec-429b-8377-f03c171d1098", "eventTime": "2017-05-27T05:09:16Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3YWDZZCNP7IWS6XN", "expiration": "May 27, 2017 6:09:16 AM", "sessionToken": "FQoDYXdzECYaDC1eo+iBqf5Zhq+pyyLMAUX0Wto91Zby8LJ6+/CocikOElHKxF/7mpvn1qiK1f6ynDAMyvWDgz+Vzcn+S5Y2FtStsZzZcNBKbFtlXSDk9XhMyD1oag4lsXtPzfNR79sIT52SycBBYXd8V1mrT99S22R8PiyJaN2fRQNvHhjm71RvtD9yr8t/TF/Yf5SGp+sbbjzf5dubZY4b/A0mGzHXQmxMWDk0EXV9W1nqLvQiLg7uWHvdft7FyZGJdRvKCToaZAEX/ha5ocb3abHWN1au6Ay6OM41o/YkSK6LpSj8k6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48bd1ea4-157f-4e75-95d8-0f824a0b0103", "record_id": "flaws_cloudtrail:0000195:48bd1ea4-157f-4e75-95d8-0f824a0b0103", "row_index": 195, "timestamp": "2017-05-27T05:09:17Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3YWDZZCNP7IWS6XN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48bd1ea4-157f-4e75-95d8-0f824a0b0103", "eventTime": "2017-05-27T05:09:17Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3YWDZZCNP7IWS6XN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:16Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f39669f-811c-4073-94a3-f391930ecbd78", "record_id": "flaws_cloudtrail:0000196:0f39669f-811c-4073-94a3-f391930ecbd78", "row_index": 196, "timestamp": "2017-05-27T05:09:18Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f39669f-811c-4073-94a3-f391930ecbd78", "eventTime": "2017-05-27T05:09:18Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYI5X7K4WVZH2RG67", "expiration": "May 27, 2017 6:09:18 AM", "sessionToken": "FQoDYXdzECYaDFImRnJ2N1QndLzyqiLMAXkXlFw4FuRFEXrj7wQtkNZu02WUu/b6ZcNMlmN0wXxVLiT9YNfRv3F+ViU5R9esfShowA/2okxtpBMR9fJ11n+dkQHvvPbc8mHniBcVE5Ex3V7RSfmiT43zrrfdoel+0MrDBnP+t5EJ7nR20OxulzScg4k9PgftdpBSq5svSkSy77ALeektv8IqSaVQ+8BZy/5NCYzfW9uc99zvsaxz55tXVvsrPXU9gCQ2H246oEJfeidJeY46I5bqA292L+oDcQkgjJvbKNu0N4vdnSj+k6TJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cc3ab71-1e42-4226-929b-a1869366261c", "record_id": "flaws_cloudtrail:0000197:8cc3ab71-1e42-4226-929b-a1869366261c", "row_index": 197, "timestamp": "2017-05-27T05:09:19Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYI5X7K4WVZH2RG67", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cc3ab71-1e42-4226-929b-a1869366261c", "eventTime": "2017-05-27T05:09:19Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYI5X7K4WVZH2RG67", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c99b118-ed8f-4239-9800-5eeb197511e4", "record_id": "flaws_cloudtrail:0000198:0c99b118-ed8f-4239-9800-5eeb197511e4", "row_index": 198, "timestamp": "2017-05-27T05:09:20Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYI5X7K4WVZH2RG67", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c99b118-ed8f-4239-9800-5eeb197511e4", "eventTime": "2017-05-27T05:09:20Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYI5X7K4WVZH2RG67", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6e2548f-6aea-4ed2-b54d-50e1ac8b09b5", "record_id": "flaws_cloudtrail:0000199:a6e2548f-6aea-4ed2-b54d-50e1ac8b09b5", "row_index": 199, "timestamp": "2017-05-27T05:09:21Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYI5X7K4WVZH2RG67", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 999, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6e2548f-6aea-4ed2-b54d-50e1ac8b09b5", "eventTime": "2017-05-27T05:09:21Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYI5X7K4WVZH2RG67", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c36d392-0979-4a1b-bbe1-4ab0d03b88ab", "record_id": "flaws_cloudtrail:0000200:5c36d392-0979-4a1b-bbe1-4ab0d03b88ab", "row_index": 200, "timestamp": "2017-05-27T05:09:23Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYI5X7K4WVZH2RG67", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c36d392-0979-4a1b-bbe1-4ab0d03b88ab", "eventTime": "2017-05-27T05:09:23Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYI5X7K4WVZH2RG67", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "625a63ea-ce17-4742-a0fb-a5c39587818c", "record_id": "flaws_cloudtrail:0000201:625a63ea-ce17-4742-a0fb-a5c39587818c", "row_index": 201, "timestamp": "2017-05-27T05:09:24Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYI5X7K4WVZH2RG67", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "625a63ea-ce17-4742-a0fb-a5c39587818c", "eventTime": "2017-05-27T05:09:24Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYI5X7K4WVZH2RG67", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55bbc942-2317-4413-a842-1b928868cad3", "record_id": "flaws_cloudtrail:0000202:55bbc942-2317-4413-a842-1b928868cad3", "row_index": 202, "timestamp": "2017-05-27T05:09:24Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYI5X7K4WVZH2RG67", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55bbc942-2317-4413-a842-1b928868cad3", "eventTime": "2017-05-27T05:09:24Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYI5X7K4WVZH2RG67", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2dcef46-2432-4f6f-8889-9a1db6dbd0c1", "record_id": "flaws_cloudtrail:0000203:c2dcef46-2432-4f6f-8889-9a1db6dbd0c1", "row_index": 203, "timestamp": "2017-05-27T05:09:25Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYI5X7K4WVZH2RG67", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2dcef46-2432-4f6f-8889-9a1db6dbd0c1", "eventTime": "2017-05-27T05:09:25Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYI5X7K4WVZH2RG67", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4173a98-b5dc-4d41-ba4d-c870d70a1f29", "record_id": "flaws_cloudtrail:0000204:d4173a98-b5dc-4d41-ba4d-c870d70a1f29", "row_index": 204, "timestamp": "2017-05-27T05:09:26Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYI5X7K4WVZH2RG67", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4173a98-b5dc-4d41-ba4d-c870d70a1f29", "eventTime": "2017-05-27T05:09:26Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYI5X7K4WVZH2RG67", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ec292ba-10ae-4d48-9fca-1c2b8145c80b", "record_id": "flaws_cloudtrail:0000205:8ec292ba-10ae-4d48-9fca-1c2b8145c80b", "row_index": 205, "timestamp": "2017-05-27T05:09:27Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYI5X7K4WVZH2RG67", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ec292ba-10ae-4d48-9fca-1c2b8145c80b", "eventTime": "2017-05-27T05:09:27Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYI5X7K4WVZH2RG67", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b5d04de-ebcb-4efb-9265-6f502d5ced83", "record_id": "flaws_cloudtrail:0000206:5b5d04de-ebcb-4efb-9265-6f502d5ced83", "row_index": 206, "timestamp": "2017-05-27T05:09:28Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYI5X7K4WVZH2RG67", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b5d04de-ebcb-4efb-9265-6f502d5ced83", "eventTime": "2017-05-27T05:09:28Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYI5X7K4WVZH2RG67", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e6be427-4cb3-40b6-ac59-5fc6ebed3a8e", "record_id": "flaws_cloudtrail:0000207:7e6be427-4cb3-40b6-ac59-5fc6ebed3a8e", "row_index": 207, "timestamp": "2017-05-27T05:09:29Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYI5X7K4WVZH2RG67", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e6be427-4cb3-40b6-ac59-5fc6ebed3a8e", "eventTime": "2017-05-27T05:09:29Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYI5X7K4WVZH2RG67", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fce1912f-c205-4033-b4dd-16ad838eeacf", "record_id": "flaws_cloudtrail:0000208:fce1912f-c205-4033-b4dd-16ad838eeacf", "row_index": 208, "timestamp": "2017-05-27T05:09:29Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYI5X7K4WVZH2RG67", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fce1912f-c205-4033-b4dd-16ad838eeacf", "eventTime": "2017-05-27T05:09:29Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYI5X7K4WVZH2RG67", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a672454-7ff4-4d65-9257-21d94c64749", "record_id": "flaws_cloudtrail:0000209:a672454-7ff4-4d65-9257-21d94c64749", "row_index": 209, "timestamp": "2017-05-27T05:09:30Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYI5X7K4WVZH2RG67", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a672454-7ff4-4d65-9257-21d94c64749", "eventTime": "2017-05-27T05:09:30Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYI5X7K4WVZH2RG67", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24700a0-803c-4e0c-a7f8-6852cd3d49e2", "record_id": "flaws_cloudtrail:0000210:24700a0-803c-4e0c-a7f8-6852cd3d49e2", "row_index": 210, "timestamp": "2017-05-27T05:09:30Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYI5X7K4WVZH2RG67", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24700a0-803c-4e0c-a7f8-6852cd3d49e2", "eventTime": "2017-05-27T05:09:30Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYI5X7K4WVZH2RG67", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1cb3604-0630-4bdf-bf6d-c22c93eadaf0", "record_id": "flaws_cloudtrail:0000211:d1cb3604-0630-4bdf-bf6d-c22c93eadaf0", "row_index": 211, "timestamp": "2017-05-27T05:09:31Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1cb3604-0630-4bdf-bf6d-c22c93eadaf0", "eventTime": "2017-05-27T05:09:31Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAC721GVRV03OLTGXM", "expiration": "May 27, 2017 6:09:31 AM", "sessionToken": "FQoDYXdzECYaDEzmjcvR4RhwA+m59yLMAQHozrE5nas2RaQGRzj80JLh8SJMP36wEUiQgFxatHQRu4+gBulst/D7CfGAGvN80uVqANaF2KOhXClXjS5PnusTnARstoGZ1lpqBMFSi1byk2xo6iUp/xvlYbGHJPL41ACOzCYJ7hPab+AtGSxSW7xuszn0a1hG7LxKcX4NyBgcx2lHukp/tk0zribW8+x5xfqHV/+FDcazqLaoUtzP//ox7vv7QTEXEEqPWDFsudPRhnvqUEnxguBT6Fg21IWKVQrg8es/B3rj65AWtyiLlKTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "782a5acf-d867-4873-91d6-d63b19659e06", "record_id": "flaws_cloudtrail:0000212:782a5acf-d867-4873-91d6-d63b19659e06", "row_index": 212, "timestamp": "2017-05-27T05:09:32Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAC721GVRV03OLTGXM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "782a5acf-d867-4873-91d6-d63b19659e06", "eventTime": "2017-05-27T05:09:32Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAC721GVRV03OLTGXM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "712792e1-d1eb-40e1-9c18-34e670b419e5", "record_id": "flaws_cloudtrail:0000213:712792e1-d1eb-40e1-9c18-34e670b419e5", "row_index": 213, "timestamp": "2017-05-27T05:09:33Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAC721GVRV03OLTGXM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "712792e1-d1eb-40e1-9c18-34e670b419e5", "eventTime": "2017-05-27T05:09:33Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAC721GVRV03OLTGXM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daa977dc-c7e4-4d6d-8739-5b393f723d34", "record_id": "flaws_cloudtrail:0000214:daa977dc-c7e4-4d6d-8739-5b393f723d34", "row_index": 214, "timestamp": "2017-05-27T05:09:34Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAC721GVRV03OLTGXM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daa977dc-c7e4-4d6d-8739-5b393f723d34", "eventTime": "2017-05-27T05:09:34Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAC721GVRV03OLTGXM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ccc8116-c383-47ed-bce9-5b43fa217d07", "record_id": "flaws_cloudtrail:0000215:0ccc8116-c383-47ed-bce9-5b43fa217d07", "row_index": 215, "timestamp": "2017-05-27T05:09:35Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAC721GVRV03OLTGXM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ccc8116-c383-47ed-bce9-5b43fa217d07", "eventTime": "2017-05-27T05:09:35Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAC721GVRV03OLTGXM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5280b49-5318-47e2-96f9-e18c55fb3df6", "record_id": "flaws_cloudtrail:0000216:c5280b49-5318-47e2-96f9-e18c55fb3df6", "row_index": 216, "timestamp": "2017-05-27T05:09:36Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAC721GVRV03OLTGXM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5280b49-5318-47e2-96f9-e18c55fb3df6", "eventTime": "2017-05-27T05:09:36Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAC721GVRV03OLTGXM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "698eaa28-bf18-412d-9223-6016a463ac29", "record_id": "flaws_cloudtrail:0000217:698eaa28-bf18-412d-9223-6016a463ac29", "row_index": 217, "timestamp": "2017-05-27T05:09:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAC721GVRV03OLTGXM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "698eaa28-bf18-412d-9223-6016a463ac29", "eventTime": "2017-05-27T05:09:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAC721GVRV03OLTGXM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60c12e16-7757-4976-ba59-c01d2d3cef33", "record_id": "flaws_cloudtrail:0000218:60c12e16-7757-4976-ba59-c01d2d3cef33", "row_index": 218, "timestamp": "2017-05-27T05:09:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAC721GVRV03OLTGXM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60c12e16-7757-4976-ba59-c01d2d3cef33", "eventTime": "2017-05-27T05:09:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAC721GVRV03OLTGXM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92991-badd-482b-901d-2267c3c067af", "record_id": "flaws_cloudtrail:0000219:92991-badd-482b-901d-2267c3c067af", "row_index": 219, "timestamp": "2017-05-27T05:09:39Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAC721GVRV03OLTGXM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92991-badd-482b-901d-2267c3c067af", "eventTime": "2017-05-27T05:09:39Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAC721GVRV03OLTGXM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e7f2cfc-133c-463c-9798-fbd2fc6bb3b7", "record_id": "flaws_cloudtrail:0000220:8e7f2cfc-133c-463c-9798-fbd2fc6bb3b7", "row_index": 220, "timestamp": "2017-05-27T05:09:40Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAC721GVRV03OLTGXM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e7f2cfc-133c-463c-9798-fbd2fc6bb3b7", "eventTime": "2017-05-27T05:09:40Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAC721GVRV03OLTGXM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1795fd7e-b1ca-49fc-bc9e-2b8ba6efa196", "record_id": "flaws_cloudtrail:0000221:1795fd7e-b1ca-49fc-bc9e-2b8ba6efa196", "row_index": 221, "timestamp": "2017-05-27T05:09:41Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAC721GVRV03OLTGXM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1795fd7e-b1ca-49fc-bc9e-2b8ba6efa196", "eventTime": "2017-05-27T05:09:41Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAC721GVRV03OLTGXM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64c084f2-e3aa-440d-87b8-f6f82bd034c2", "record_id": "flaws_cloudtrail:0000222:64c084f2-e3aa-440d-87b8-f6f82bd034c2", "row_index": 222, "timestamp": "2017-05-27T05:09:41Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAC721GVRV03OLTGXM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64c084f2-e3aa-440d-87b8-f6f82bd034c2", "eventTime": "2017-05-27T05:09:41Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAC721GVRV03OLTGXM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b48f9b7b-0ad1-428d-a202-92910f9", "record_id": "flaws_cloudtrail:0000223:b48f9b7b-0ad1-428d-a202-92910f9", "row_index": 223, "timestamp": "2017-05-27T05:09:42Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAC721GVRV03OLTGXM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b48f9b7b-0ad1-428d-a202-92910f9", "eventTime": "2017-05-27T05:09:42Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAC721GVRV03OLTGXM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa8ba150-bd03-4768-b651-4812e586e70a", "record_id": "flaws_cloudtrail:0000224:fa8ba150-bd03-4768-b651-4812e586e70a", "row_index": 224, "timestamp": "2017-05-27T05:09:42Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAC721GVRV03OLTGXM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa8ba150-bd03-4768-b651-4812e586e70a", "eventTime": "2017-05-27T05:09:42Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAC721GVRV03OLTGXM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c35733-f3d0-4fe6-9383-aa66fcc0e94e", "record_id": "flaws_cloudtrail:0000225:c35733-f3d0-4fe6-9383-aa66fcc0e94e", "row_index": 225, "timestamp": "2017-05-27T05:09:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c35733-f3d0-4fe6-9383-aa66fcc0e94e", "eventTime": "2017-05-27T05:09:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAE2Q27Y40QNGT0QI1", "expiration": "May 27, 2017 6:09:43 AM", "sessionToken": "FQoDYXdzECYaDNJaC2dVA3xZOVtwNyLMAUZi50mgNuk8VxYGktWoReVGsVLtBKUIRmgcJr7odWirmCOioZw9VD0naT4m+VP1IA90MoeWkQL/U5ymTzokIcB0axtyp78hyYxV5l9odoIBNnAxCeVWA83gpg31Kfk0PTWPS1wgSIqavaFP3PQlPT5xuS+3aBDgpNBwJ4hgkU7TsGSjmjCzvSWC9w3RNHJQgRnwv22JGCuVFfPtDXzq/+bixtde14ubPXp4iLpi/k2aW9dSkZaoEX/BKqvNO49jRDruKdhrVq5xaWmykSiXlKTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15c95b59-0cbd-4d0d-b23b-8dc88b682d31", "record_id": "flaws_cloudtrail:0000226:15c95b59-0cbd-4d0d-b23b-8dc88b682d31", "row_index": 226, "timestamp": "2017-05-27T05:09:43Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAC721GVRV03OLTGXM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15c95b59-0cbd-4d0d-b23b-8dc88b682d31", "eventTime": "2017-05-27T05:09:43Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAC721GVRV03OLTGXM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db618d61-d970-4db0-ae2a-67624adcfc5c", "record_id": "flaws_cloudtrail:0000227:db618d61-d970-4db0-ae2a-67624adcfc5c", "row_index": 227, "timestamp": "2017-05-27T05:09:44Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAE2Q27Y40QNGT0QI1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db618d61-d970-4db0-ae2a-67624adcfc5c", "eventTime": "2017-05-27T05:09:44Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAE2Q27Y40QNGT0QI1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bdf8aaa-2893-411d-ba89-2fe84c8286a7", "record_id": "flaws_cloudtrail:0000228:0bdf8aaa-2893-411d-ba89-2fe84c8286a7", "row_index": 228, "timestamp": "2017-05-27T05:09:45Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAE2Q27Y40QNGT0QI1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bdf8aaa-2893-411d-ba89-2fe84c8286a7", "eventTime": "2017-05-27T05:09:45Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAE2Q27Y40QNGT0QI1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a35c0ac8-912a-4993-965b-94e7bd4671b4", "record_id": "flaws_cloudtrail:0000229:a35c0ac8-912a-4993-965b-94e7bd4671b4", "row_index": 229, "timestamp": "2017-05-27T05:09:46Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAE2Q27Y40QNGT0QI1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a35c0ac8-912a-4993-965b-94e7bd4671b4", "eventTime": "2017-05-27T05:09:46Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAE2Q27Y40QNGT0QI1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca5b9b4c-71e7-49c4-b312-301841bce2927", "record_id": "flaws_cloudtrail:0000230:ca5b9b4c-71e7-49c4-b312-301841bce2927", "row_index": 230, "timestamp": "2017-05-27T05:09:48Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAE2Q27Y40QNGT0QI1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca5b9b4c-71e7-49c4-b312-301841bce2927", "eventTime": "2017-05-27T05:09:48Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAE2Q27Y40QNGT0QI1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57b94eaf-16f4-4128-ba14-13ac936096", "record_id": "flaws_cloudtrail:0000231:57b94eaf-16f4-4128-ba14-13ac936096", "row_index": 231, "timestamp": "2017-05-27T05:09:49Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAE2Q27Y40QNGT0QI1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57b94eaf-16f4-4128-ba14-13ac936096", "eventTime": "2017-05-27T05:09:49Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAE2Q27Y40QNGT0QI1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdf787e6-052d-495a-b698-38dece6bcfb5", "record_id": "flaws_cloudtrail:0000232:fdf787e6-052d-495a-b698-38dece6bcfb5", "row_index": 232, "timestamp": "2017-05-27T05:09:50Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAE2Q27Y40QNGT0QI1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdf787e6-052d-495a-b698-38dece6bcfb5", "eventTime": "2017-05-27T05:09:50Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAE2Q27Y40QNGT0QI1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e260e9a0-cba9-4377-8a68-c2180d1d2436", "record_id": "flaws_cloudtrail:0000233:e260e9a0-cba9-4377-8a68-c2180d1d2436", "row_index": 233, "timestamp": "2017-05-27T05:09:51Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAE2Q27Y40QNGT0QI1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e260e9a0-cba9-4377-8a68-c2180d1d2436", "eventTime": "2017-05-27T05:09:51Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAE2Q27Y40QNGT0QI1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83e2038c-0222-478a-be40-89a71291a575", "record_id": "flaws_cloudtrail:0000234:83e2038c-0222-478a-be40-89a71291a575", "row_index": 234, "timestamp": "2017-05-27T05:09:51Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAE2Q27Y40QNGT0QI1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83e2038c-0222-478a-be40-89a71291a575", "eventTime": "2017-05-27T05:09:51Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAE2Q27Y40QNGT0QI1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e09a4cf-a12b-4c1d-baf6-68b086a9dfec", "record_id": "flaws_cloudtrail:0000235:5e09a4cf-a12b-4c1d-baf6-68b086a9dfec", "row_index": 235, "timestamp": "2017-05-27T05:09:52Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAE2Q27Y40QNGT0QI1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e09a4cf-a12b-4c1d-baf6-68b086a9dfec", "eventTime": "2017-05-27T05:09:52Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAE2Q27Y40QNGT0QI1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fc137d3-ecb8-43ba-bfa1-6810d2adf779", "record_id": "flaws_cloudtrail:0000236:2fc137d3-ecb8-43ba-bfa1-6810d2adf779", "row_index": 236, "timestamp": "2017-05-27T05:09:52Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAE2Q27Y40QNGT0QI1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fc137d3-ecb8-43ba-bfa1-6810d2adf779", "eventTime": "2017-05-27T05:09:52Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAE2Q27Y40QNGT0QI1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cc7215c-4709-4e38-a9e6-8b8b24bf9db6", "record_id": "flaws_cloudtrail:0000237:5cc7215c-4709-4e38-a9e6-8b8b24bf9db6", "row_index": 237, "timestamp": "2017-05-27T05:09:53Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAE2Q27Y40QNGT0QI1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cc7215c-4709-4e38-a9e6-8b8b24bf9db6", "eventTime": "2017-05-27T05:09:53Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAE2Q27Y40QNGT0QI1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd3e5633-e7dc-4ad8-bf2f-c041eb557e39", "record_id": "flaws_cloudtrail:0000238:fd3e5633-e7dc-4ad8-bf2f-c041eb557e39", "row_index": 238, "timestamp": "2017-05-27T05:09:53Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAE2Q27Y40QNGT0QI1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd3e5633-e7dc-4ad8-bf2f-c041eb557e39", "eventTime": "2017-05-27T05:09:53Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAE2Q27Y40QNGT0QI1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:09:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "249838e4-1598-416b-b3e7-bd847afe0b14", "record_id": "flaws_cloudtrail:0000239:249838e4-1598-416b-b3e7-bd847afe0b14", "row_index": 239, "timestamp": "2017-05-27T05:14:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "249838e4-1598-416b-b3e7-bd847afe0b14", "eventTime": "2017-05-27T05:14:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAI19DSI0TYZSXIIHS", "expiration": "May 27, 2017 6:14:38 AM", "sessionToken": "FQoDYXdzECYaDM7CIsLucxDgGSFi1SLMAalAnRQ92xxbRe4LnVDDxMc5Ede7ZaUZjLLr1I/UmR9TQnApL2xve9L9am3Sl8kW6H3F05H4922l4T9pK0TAAe86sSZLRR7kb8Kp5t8qti61UBOgHxUs2jjU1c1+oZB1tVJvJ92tleDeb7kfkOlWMelMkQeCDgwaDM9jrI9Y6N/3ke9UtG41QdPxbAuO2BQaTsZhSI0tb9Q1+dvljkkzrbKwBx9nBB5X14uEm+XMe0kET29mk/jQbdhhgVOIgKX9PK/zszm/6e3E615CWSi+lqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbf10720-dc2a-4627-802d-13beb228850e", "record_id": "flaws_cloudtrail:0000240:fbf10720-dc2a-4627-802d-13beb228850e", "row_index": 240, "timestamp": "2017-05-27T05:14:38Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI19DSI0TYZSXIIHS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbf10720-dc2a-4627-802d-13beb228850e", "eventTime": "2017-05-27T05:14:38Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI19DSI0TYZSXIIHS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "232864eb-808f-404d-a044-c2f3da5e7531", "record_id": "flaws_cloudtrail:0000241:232864eb-808f-404d-a044-c2f3da5e7531", "row_index": 241, "timestamp": "2017-05-27T05:14:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "232864eb-808f-404d-a044-c2f3da5e7531", "eventTime": "2017-05-27T05:14:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIABXTEA1GJQE1AW2Z9", "expiration": "May 27, 2017 6:14:39 AM", "sessionToken": "FQoDYXdzECYaDA3/ZMuohLqHTemQZyLMAcrEa7zPecmURnG8Kjb11Km+UyAKC105iQNrrPwZAq+Zdq53S5E0C9Gc4KkVl7YuQRR5zetRA8PYCsB/+k5IQUsKK8jz+yaIECdgyL3/Qagum4Fm1oyp5fzJJ39ipMyfdLHecMq80gZEftL7T1LA7huo973z/pmrXJ9XSGbmv0lDj0DF/p+C0MNEoAdtZB5OQBxLjlJs1s8XUkB8V9QTN0wXpolKGoIfwvOJzjqJ05+3z1UyJV5xnZPVpJ2/MI2vtcQtR54CZCqVmg6JMSi/lqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17c416617-e7bb-4735-80bd-3bd5fc7ac608", "record_id": "flaws_cloudtrail:0000242:17c416617-e7bb-4735-80bd-3bd5fc7ac608", "row_index": 242, "timestamp": "2017-05-27T05:14:39Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABXTEA1GJQE1AW2Z9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17c416617-e7bb-4735-80bd-3bd5fc7ac608", "eventTime": "2017-05-27T05:14:39Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABXTEA1GJQE1AW2Z9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2f521ca-e842-412a-9560-791dd618b7e5", "record_id": "flaws_cloudtrail:0000243:e2f521ca-e842-412a-9560-791dd618b7e5", "row_index": 243, "timestamp": "2017-05-27T05:14:39Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABXTEA1GJQE1AW2Z9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2f521ca-e842-412a-9560-791dd618b7e5", "eventTime": "2017-05-27T05:14:39Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABXTEA1GJQE1AW2Z9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8945de9e-b692-43fa-b8d0-732363f2", "record_id": "flaws_cloudtrail:0000244:8945de9e-b692-43fa-b8d0-732363f2", "row_index": 244, "timestamp": "2017-05-27T05:14:39Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI19DSI0TYZSXIIHS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1038, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8945de9e-b692-43fa-b8d0-732363f2", "eventTime": "2017-05-27T05:14:39Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI19DSI0TYZSXIIHS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb7fb412-1fc7-44eb-a0c9-bda977a2bdf8", "record_id": "flaws_cloudtrail:0000245:bb7fb412-1fc7-44eb-a0c9-bda977a2bdf8", "row_index": 245, "timestamp": "2017-05-27T05:14:40Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb7fb412-1fc7-44eb-a0c9-bda977a2bdf8", "eventTime": "2017-05-27T05:14:40Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIASW4554ILRVVL6UXD", "expiration": "May 27, 2017 6:14:40 AM", "sessionToken": "FQoDYXdzECYaDOUabS1w5RGsSjrHUCLMAc1FrOrFBnWcls6RBcJaMKQSyNIyLGa/r1b/efWX6fpanx6lZbjLXe4uJcOwi1QlqRidWu+Aqp/VGf/76H1zZevrpU18g4QZZo3zu3NJ6XCK06sHWqF1qNDu4zZ7oDz5GhcA/C8On9gSEKjIZ2KY1MPyTEAGKTp2AieBMKmn3ntSAgnV/qgAjDXHP58O3kHUg3y8rE2m3mp1IKM2VqkRaMZX66nn1gRRCjEMWke3Zr0X4s0aC2ks5/EZeKb0LQYD7TvGPZiLNbHmilPHQCjAlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ad217a5-16b7-4550-8017-01af1bf9811d", "record_id": "flaws_cloudtrail:0000246:0ad217a5-16b7-4550-8017-01af1bf9811d", "row_index": 246, "timestamp": "2017-05-27T05:14:41Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASW4554ILRVVL6UXD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ad217a5-16b7-4550-8017-01af1bf9811d", "eventTime": "2017-05-27T05:14:41Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASW4554ILRVVL6UXD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:40Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06004-8c84-4362-af42-3acb12ecc190", "record_id": "flaws_cloudtrail:0000247:06004-8c84-4362-af42-3acb12ecc190", "row_index": 247, "timestamp": "2017-05-27T05:14:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASW4554ILRVVL6UXD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06004-8c84-4362-af42-3acb12ecc190", "eventTime": "2017-05-27T05:14:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASW4554ILRVVL6UXD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:40Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7d5accc-c390-4db4-9149-fe5e2d7af798", "record_id": "flaws_cloudtrail:0000248:c7d5accc-c390-4db4-9149-fe5e2d7af798", "row_index": 248, "timestamp": "2017-05-27T05:14:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7d5accc-c390-4db4-9149-fe5e2d7af798", "eventTime": "2017-05-27T05:14:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIADN789P7RG2KATIS4", "expiration": "May 27, 2017 6:14:41 AM", "sessionToken": "FQoDYXdzECYaDE3WVHdU1Yo8RqobfSLMAa6z5EeeZaC+QPBF9Wl+uYBcGMwXetHtVyn0qtW0L318bYbJD6zzzIBco32bRajMiWrVKlepEWWjJ2FR8WX7TGQDVu61Q2XARTVpebdYrqLJy4yyGVgoN0eoM5KfSmyBpaczR+mGhSrikjsy0xwvdBFdY7vXx1z8pwNJGXbdSCGz3ynhuayNfZxVYb5ulFwKPvmmjeqpBD8kaUscEzjDHwNcOUEwU4+KmCYtn06Nwtj1qWSTfkA3EgOr/Qzpcs4NwRBOZvOAo4f7H/muLyjBlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33553f8-6d77-42cf-aa18-ba2267c43f4c", "record_id": "flaws_cloudtrail:0000249:33553f8-6d77-42cf-aa18-ba2267c43f4c", "row_index": 249, "timestamp": "2017-05-27T05:14:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIADN789P7RG2KATIS4", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33553f8-6d77-42cf-aa18-ba2267c43f4c", "eventTime": "2017-05-27T05:14:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIADN789P7RG2KATIS4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03a3bc34-f220-4f24-a9e5-61fdc17a552b", "record_id": "flaws_cloudtrail:0000250:03a3bc34-f220-4f24-a9e5-61fdc17a552b", "row_index": 250, "timestamp": "2017-05-27T05:14:42Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIADN789P7RG2KATIS4", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1046, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03a3bc34-f220-4f24-a9e5-61fdc17a552b", "eventTime": "2017-05-27T05:14:42Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIADN789P7RG2KATIS4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90c3c6c7-6f7a-4e69-8f12-cf5e608028be6", "record_id": "flaws_cloudtrail:0000251:90c3c6c7-6f7a-4e69-8f12-cf5e608028be6", "row_index": 251, "timestamp": "2017-05-27T05:14:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90c3c6c7-6f7a-4e69-8f12-cf5e608028be6", "eventTime": "2017-05-27T05:14:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIABWFCISG3FWC38VQZ", "expiration": "May 27, 2017 6:14:43 AM", "sessionToken": "FQoDYXdzECYaDBKvQrE0Z47X9c7BMSLMAb0XD4QldgouIG8fmLkE+njcQ6kKrgy03YMUbJPZhc1H8KdnoIgELeHjkvU5yTGy8atEbgcGiLUc9RgMw6bEYB+/FJ+zL4y5vy6SC5ZwyLPzkWhwcQHMiQqf0YeYhQ7319wWLsp0jNjoVF4N0FME2lSOM3hDU/EA4aBui9/JM+sAJb+J0ze0O6dqJFfaJIO84QuFTXSMpgzQ3pTpsij9oHKIy4poXi4tbGaRk9E9w5Boto0iGi5StHPcb2d+jfXjRDca+QaBttbpqgFv6yjDlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f40636-7c0a-4166-bf10-7dbef6413d59", "record_id": "flaws_cloudtrail:0000252:8f40636-7c0a-4166-bf10-7dbef6413d59", "row_index": 252, "timestamp": "2017-05-27T05:14:44Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABWFCISG3FWC38VQZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f40636-7c0a-4166-bf10-7dbef6413d59", "eventTime": "2017-05-27T05:14:44Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABWFCISG3FWC38VQZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ef4887e-0688-4d36-aa36-a511b850068", "record_id": "flaws_cloudtrail:0000253:1ef4887e-0688-4d36-aa36-a511b850068", "row_index": 253, "timestamp": "2017-05-27T05:14:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIABWFCISG3FWC38VQZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ef4887e-0688-4d36-aa36-a511b850068", "eventTime": "2017-05-27T05:14:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIABWFCISG3FWC38VQZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cac552c-6c70-49d4-a089-6775f5bfc4d0", "record_id": "flaws_cloudtrail:0000254:9cac552c-6c70-49d4-a089-6775f5bfc4d0", "row_index": 254, "timestamp": "2017-05-27T05:14:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cac552c-6c70-49d4-a089-6775f5bfc4d0", "eventTime": "2017-05-27T05:14:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4JCUSQ8SSTP85A3N", "expiration": "May 27, 2017 6:14:44 AM", "sessionToken": "FQoDYXdzECYaDH3XW+iSPgCVeMvl+yLMAbanptEcr+aO+mGWajcabIlxqY1x5vndWbIpxYnRvEguMVqeDKUQpt3YYQyk4HRZGTwFUfKHmkLhtYPF8jHetkJLQX86XHwsMWUQMUosf91HYwGtMCTj70aRybNRTMj65StcXdpJFi1+aVSfBA9C+wJ4q0ndw9ZayKd4w3FJK2xYuKzNXjtZMmqDmD3lbK2YuS4vhvyIAUZa3Tzx/yHesoEU1TWfb4I5bH9w9F4clZb1CFOo/zKkeIvUFuBaaNs6sdAe5koAcm0Z/Xyp2ijElqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e96919c-f87d-425b-b553-6f5790db2e83", "record_id": "flaws_cloudtrail:0000255:1e96919c-f87d-425b-b553-6f5790db2e83", "row_index": 255, "timestamp": "2017-05-27T05:14:45Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4JCUSQ8SSTP85A3N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e96919c-f87d-425b-b553-6f5790db2e83", "eventTime": "2017-05-27T05:14:45Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4JCUSQ8SSTP85A3N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc30e1ba-4eac-46ef-bf4e-687d062d1829", "record_id": "flaws_cloudtrail:0000256:fc30e1ba-4eac-46ef-bf4e-687d062d1829", "row_index": 256, "timestamp": "2017-05-27T05:14:46Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4JCUSQ8SSTP85A3N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1044, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc30e1ba-4eac-46ef-bf4e-687d062d1829", "eventTime": "2017-05-27T05:14:46Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4JCUSQ8SSTP85A3N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "539476-daa8-4173-8c5c-2e4e6a06eaa2", "record_id": "flaws_cloudtrail:0000257:539476-daa8-4173-8c5c-2e4e6a06eaa2", "row_index": 257, "timestamp": "2017-05-27T05:14:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "539476-daa8-4173-8c5c-2e4e6a06eaa2", "eventTime": "2017-05-27T05:14:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGNUASTWGV4ZCTPV3", "expiration": "May 27, 2017 6:14:46 AM", "sessionToken": "FQoDYXdzECYaDLQxV+tIaHOoqA+sXSLMAYsr0hzt7HkBdva2iyiK2imWgWUOeO/AMKKyrTMYHhOx16jFt6FqsepzYI+9mEQRd0UiSvr/KLMqov9FFVJW5oXBBx7/XwNqgdIThrMIuyM7tvjsR6B1DBY4XxxzKZISLG2tLfCB/94OrC1jVo6oHqeu3dpgbc0SOJhXfE7t9hyNqluv/JT0lVvVC+C+IbL5sw1kM1x/ergi8qBeHADZhngYihUCx5ErZ+Fyfpe+BVPLb6zs+cllKLTjaREQr9LZR/HlhgvwVzLJXUCZCSjGlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bb8fc69-fd8a-4f87-8322-8762c6a91b3e", "record_id": "flaws_cloudtrail:0000258:1bb8fc69-fd8a-4f87-8322-8762c6a91b3e", "row_index": 258, "timestamp": "2017-05-27T05:14:46Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAGNUASTWGV4ZCTPV3", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bb8fc69-fd8a-4f87-8322-8762c6a91b3e", "eventTime": "2017-05-27T05:14:46Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAGNUASTWGV4ZCTPV3", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "951e5204-1ad3-442a-a5ae-d8d838b0fd01", "record_id": "flaws_cloudtrail:0000259:951e5204-1ad3-442a-a5ae-d8d838b0fd01", "row_index": 259, "timestamp": "2017-05-27T05:14:46Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAGNUASTWGV4ZCTPV3", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "951e5204-1ad3-442a-a5ae-d8d838b0fd01", "eventTime": "2017-05-27T05:14:46Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAGNUASTWGV4ZCTPV3", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4492bd1e-f084-4150-995e-417215cc0ae1", "record_id": "flaws_cloudtrail:0000260:4492bd1e-f084-4150-995e-417215cc0ae1", "row_index": 260, "timestamp": "2017-05-27T05:14:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4492bd1e-f084-4150-995e-417215cc0ae1", "eventTime": "2017-05-27T05:14:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXWAB0MFGUFOMLDCB", "expiration": "May 27, 2017 6:14:47 AM", "sessionToken": "FQoDYXdzECYaDKgD9KsDLWmnkxuVWiLMAXAmW/xTexTUYOG34yHn7wOVZhbY0vFTTdYhKNzkPaMreja3TqsZwgcGUNsm3zAWTsYI2lhdOB8TxTJeiyfsGyS1Gr+HnksYMT1+bJcyhAP2eoq7sisv5njyckdzjhWAdeplaMN1h/C7YHrHGTIAXUylm+r2V6CwgLZsJfwd3Dj9vU+aMG2xGiVWEQwYR9m+OhjuBlfIlc3ziE6tPFFSEqLyrUze1fx3rneJ3kolU/ttRuTqyqoTnlXuB9BdJb1rQE6idHOBW8Ft6+x4xSjHlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53e198ff-6679-4103-bd77-281ba71283b4", "record_id": "flaws_cloudtrail:0000261:53e198ff-6679-4103-bd77-281ba71283b4", "row_index": 261, "timestamp": "2017-05-27T05:14:48Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAXWAB0MFGUFOMLDCB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53e198ff-6679-4103-bd77-281ba71283b4", "eventTime": "2017-05-27T05:14:48Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAXWAB0MFGUFOMLDCB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "003927-02bd-4e3e-ba7c-ac3a5369b2ae", "record_id": "flaws_cloudtrail:0000262:003927-02bd-4e3e-ba7c-ac3a5369b2ae", "row_index": 262, "timestamp": "2017-05-27T05:14:48Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAXWAB0MFGUFOMLDCB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1045, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "003927-02bd-4e3e-ba7c-ac3a5369b2ae", "eventTime": "2017-05-27T05:14:48Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAXWAB0MFGUFOMLDCB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c837dad-f50a-42c4-998a-fd4e349c65e3", "record_id": "flaws_cloudtrail:0000263:1c837dad-f50a-42c4-998a-fd4e349c65e3", "row_index": 263, "timestamp": "2017-05-27T05:14:49Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA2VDCQPI4AMF8F30N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1045, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c837dad-f50a-42c4-998a-fd4e349c65e3", "eventTime": "2017-05-27T05:14:49Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA2VDCQPI4AMF8F30N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53f754a1-a8f6-4cf8-a53f-834c2b4d32b9", "record_id": "flaws_cloudtrail:0000264:53f754a1-a8f6-4cf8-a53f-834c2b4d32b9", "row_index": 264, "timestamp": "2017-05-27T05:14:49Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA2VDCQPI4AMF8F30N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53f754a1-a8f6-4cf8-a53f-834c2b4d32b9", "eventTime": "2017-05-27T05:14:49Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA2VDCQPI4AMF8F30N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5e36e54-d8f1-4a00-ba4f-64f970ee6414", "record_id": "flaws_cloudtrail:0000265:b5e36e54-d8f1-4a00-ba4f-64f970ee6414", "row_index": 265, "timestamp": "2017-05-27T05:14:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5e36e54-d8f1-4a00-ba4f-64f970ee6414", "eventTime": "2017-05-27T05:14:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2VDCQPI4AMF8F30N", "expiration": "May 27, 2017 6:14:49 AM", "sessionToken": "FQoDYXdzECYaDMW+228X76ZYFCTFqSLMAVQVui7Qrk6NoSeAn50QrWd1kCkJWRmIYTalX4lUbC/WzzImFDlPfMdws8x3lBOGPlXTq1tseyR19K8uAFalYR+fcRh9PkfC53YJ6h9Buj7Y+I1AK+vVuRXkGh9A3r+OBiJApcbUmIhy3Zwg6+AvL7I+/yBQYPsX4CSui6j7WLdaxdNkE075u1Lu5s5tXnaF1LWItFKkAo4uBuxXHelnR3dfAc4VGAMGxIvhnfDdMnzdZ1ebXR7rEaAQY/jMviAdly49bJrRO7Sp6tss9CjJlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78e75f6e-7b1e-4c12-ac15-0d86378f5", "record_id": "flaws_cloudtrail:0000266:78e75f6e-7b1e-4c12-ac15-0d86378f5", "row_index": 266, "timestamp": "2017-05-27T05:14:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78e75f6e-7b1e-4c12-ac15-0d86378f5", "eventTime": "2017-05-27T05:14:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAR33PIZD01Y1RHM44", "expiration": "May 27, 2017 6:14:50 AM", "sessionToken": "FQoDYXdzECYaDFXOo5hAMHnQyIzzfyLMAfQiiraPZFY9XwpaajR8XWta9nKQ+D8CYjeXWD9z8gLnm4wWcnxAvKZ/LqNXWOuIYuM5MnpGw+zNVnZV7pT61SXFZYnx/0l7y20MD9f4O4B2ikyAiVu810PsXxHiTyOJInFfxkDd8QqdQjL6buHt73/CdFlkHNFOLFPTTzB5ckKsLEBEKoAorRQHDButlKTky8OHQE3wJAmjovIg9KtZnH+mGpjGVgnryXcrxjFUiexNHzSaEJ53VGcvDo6qvS75d14z9pDX2YoBwzYbZijKlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5088fdbb-1be7-41a7-bc5f-ec51252c14a1", "record_id": "flaws_cloudtrail:0000267:5088fdbb-1be7-41a7-bc5f-ec51252c14a1", "row_index": 267, "timestamp": "2017-05-27T05:14:51Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5088fdbb-1be7-41a7-bc5f-ec51252c14a1", "eventTime": "2017-05-27T05:14:51Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYRNQP14E6XH46LL8", "expiration": "May 27, 2017 6:14:51 AM", "sessionToken": "FQoDYXdzECYaDJcHlBarnuJWufdUByLMAaBQmHZPo6h/k4vySg2DwL0nt+bSJyhWahsmFuJJ3DaOSHrrGjPiT3WQwp4dI0S2w1AiC52/3XSCU0Es99Wu/GnCnusFOaGrr6zKP1VEHVPcPeXJQlRANPYa8lbJ6KCFpx6Naodtto8315QWXgcOy0nXlBJ9YrhELHZId7WDQidPd+jnOogvfU1YC6bzeJCT/Yv5zSooqQFamhTGg0EHQIE6/Vs6cJI8E0f6sTZ+4gAd3m5gR6aw2V/MSLWwpMbSuS+q8CB6rpy7sy7z3SjLlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44ce83ee-4763-4541-82f1-6c8c797f6d50", "record_id": "flaws_cloudtrail:0000268:44ce83ee-4763-4541-82f1-6c8c797f6d50", "row_index": 268, "timestamp": "2017-05-27T05:14:51Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYRNQP14E6XH46LL8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44ce83ee-4763-4541-82f1-6c8c797f6d50", "eventTime": "2017-05-27T05:14:51Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYRNQP14E6XH46LL8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd62934-c191-47a2-833e-3e172b970adc", "record_id": "flaws_cloudtrail:0000269:dd62934-c191-47a2-833e-3e172b970adc", "row_index": 269, "timestamp": "2017-05-27T05:14:51Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYRNQP14E6XH46LL8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd62934-c191-47a2-833e-3e172b970adc", "eventTime": "2017-05-27T05:14:51Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYRNQP14E6XH46LL8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c671b1a-f04f-4639-b93a-3e0d0b871fad", "record_id": "flaws_cloudtrail:0000270:0c671b1a-f04f-4639-b93a-3e0d0b871fad", "row_index": 270, "timestamp": "2017-05-27T05:14:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c671b1a-f04f-4639-b93a-3e0d0b871fad", "eventTime": "2017-05-27T05:14:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZL5M4CQQ4J76E422", "expiration": "May 27, 2017 6:14:52 AM", "sessionToken": "FQoDYXdzECYaDEXOSDCgXYge/vzmuiLMAcl+mlX4SXC4BX6gIZwhnvuPrX9vpIMzAkP62ygi9N6PE6FlqJ4273yy1I1HUL80+T6HmeWEkgT5bmqc7jVfqJa8lhbozGfJDUF3LuUCWhYud33U7k0ZdUZo1IziHtCqitnPbpdJI+VvNiY8OCehL20vzkl/mqHOzJHnhIevkGk/Vxj2eiWaz+n3b4YbdavpzhBIn1qoM+B7+sHP3XLY7EtP4u9gBvO3h4heMFFOmkkagDfdgKMLYU+JnZSA6aikoSH8IWjf4iteRJmR1SjMlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b4887ff-042f-417a-acae-7617a142e464", "record_id": "flaws_cloudtrail:0000271:2b4887ff-042f-417a-acae-7617a142e464", "row_index": 271, "timestamp": "2017-05-27T05:14:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b4887ff-042f-417a-acae-7617a142e464", "eventTime": "2017-05-27T05:14:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIALYPPCDOJYSCVMPZ5", "expiration": "May 27, 2017 6:14:52 AM", "sessionToken": "FQoDYXdzECYaDD3VApIU9LcroTp5DyLMASC8DHWE/7oov5A++ZI3cAEC8WZHAduLLhFdsTByIJyAYyf56GTBS9PxaWgkg1FbZwXZwo0ZjwWa/iC2NwT+zNuH8hEuGDw00yOvMsf3TSeFW8hmAVUpAdp9SN0/wp/akuDf14ijDEIK/a984as3I3eM5MPMumrV5CFd0gMXt+gaxIhDTicfrTjQJsbAkMtjLiRKrcw9kFMEPyKSzUM00rSteuwPpXyopN16hv4glM+bBApl2n52gtiB1Ptm4zTLD1N9k6SxbiS+4+BRiijMlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28fc0b31-2eaa-4d3e-a031-3c04a9865e78", "record_id": "flaws_cloudtrail:0000272:28fc0b31-2eaa-4d3e-a031-3c04a9865e78", "row_index": 272, "timestamp": "2017-05-27T05:14:54Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIALYPPCDOJYSCVMPZ5", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1043, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28fc0b31-2eaa-4d3e-a031-3c04a9865e78", "eventTime": "2017-05-27T05:14:54Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIALYPPCDOJYSCVMPZ5", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0433b510-c56f-417b-b59c-05e7c631d773", "record_id": "flaws_cloudtrail:0000273:0433b510-c56f-417b-b59c-05e7c631d773", "row_index": 273, "timestamp": "2017-05-27T05:14:54Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIALYPPCDOJYSCVMPZ5", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0433b510-c56f-417b-b59c-05e7c631d773", "eventTime": "2017-05-27T05:14:54Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIALYPPCDOJYSCVMPZ5", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e720df6-8753-4ffb-880b-c52e0152293d", "record_id": "flaws_cloudtrail:0000274:0e720df6-8753-4ffb-880b-c52e0152293d", "row_index": 274, "timestamp": "2017-05-27T05:14:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e720df6-8753-4ffb-880b-c52e0152293d", "eventTime": "2017-05-27T05:14:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAK7SV4KNY2EWIDXDO", "expiration": "May 27, 2017 6:14:54 AM", "sessionToken": "FQoDYXdzECYaDI93uQ+7nol4vH75miLMAWAa+5AK0MRgMERJdL650hCL2KuQm94G1Ef+RDTK6wvYZ4gjIGWVJQW/HO4l+OECOj15wef5zlyk7j3+Hs+joKj1CcSMNvq2NUIF2yMHbwnu1Og+RYLknZu6rmBmrmL4XwicVwa+LtYfUOa+RTxsOfTE6syf7lAN+BLHkq8n1DPv5GLdCJK7L1LG+iRuwF8h0oECJ8j+Rt0jssVPrw19+sOkPbNrb4vW+LmnBOdNvxIWlB3vVHJc7ULg+lu1UGyZ1wp9VdF/oABpido16yjOlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6af425af-b01b-426d-aaad-705003c921f3", "record_id": "flaws_cloudtrail:0000275:6af425af-b01b-426d-aaad-705003c921f3", "row_index": 275, "timestamp": "2017-05-27T05:14:55Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAK7SV4KNY2EWIDXDO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1045, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6af425af-b01b-426d-aaad-705003c921f3", "eventTime": "2017-05-27T05:14:55Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAK7SV4KNY2EWIDXDO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:54Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d34418-f892-4398-8d35-648352a2f1b7", "record_id": "flaws_cloudtrail:0000276:d34418-f892-4398-8d35-648352a2f1b7", "row_index": 276, "timestamp": "2017-05-27T05:14:55Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAK7SV4KNY2EWIDXDO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d34418-f892-4398-8d35-648352a2f1b7", "eventTime": "2017-05-27T05:14:55Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAK7SV4KNY2EWIDXDO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:54Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f18849-dc24-413b-9101-d8a0cf4182cc", "record_id": "flaws_cloudtrail:0000277:f18849-dc24-413b-9101-d8a0cf4182cc", "row_index": 277, "timestamp": "2017-05-27T05:14:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f18849-dc24-413b-9101-d8a0cf4182cc", "eventTime": "2017-05-27T05:14:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6VV0M1J0WNNHIU06", "expiration": "May 27, 2017 6:14:56 AM", "sessionToken": "FQoDYXdzECYaDK4I8rzn9lbjRvaW6yLMATYHDxsaepzQa5SLnmjIG9lsHIS+jdYCzoHFOazq709hBfYRj2s0CcmFzALmSWWxyorIFdcX+8zyRKIazfbgCsyZeNGPmzzHVIih2F/5v4Srb3NHpvrU2MWYxx4hJgBHY0zdecYhCkDnagzLb+zHYgmPrkR4YEgnKysLbD997Yu2jEVwgfLHrHaIonw/57D0J6DOLOOCXKwtlvtA+B37UlxZ7+E2cYmEDJ8WOS7HgrzpGnwZl1VrQqp1+q+Dymx/PLnbBpHkZd8SKqstqyjQlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "568026caa-5114-49e9-9182-12ace866f5ac", "record_id": "flaws_cloudtrail:0000278:568026caa-5114-49e9-9182-12ace866f5ac", "row_index": 278, "timestamp": "2017-05-27T05:14:57Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6VV0M1J0WNNHIU06", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1043, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "568026caa-5114-49e9-9182-12ace866f5ac", "eventTime": "2017-05-27T05:14:57Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6VV0M1J0WNNHIU06", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1966ff33-e6f5-4610-ad10-a17dd995c873", "record_id": "flaws_cloudtrail:0000279:1966ff33-e6f5-4610-ad10-a17dd995c873", "row_index": 279, "timestamp": "2017-05-27T05:14:57Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6VV0M1J0WNNHIU06", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1966ff33-e6f5-4610-ad10-a17dd995c873", "eventTime": "2017-05-27T05:14:57Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6VV0M1J0WNNHIU06", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac7f5c19-14c1-4ed4-9de2-c6a4122a37bb", "record_id": "flaws_cloudtrail:0000280:ac7f5c19-14c1-4ed4-9de2-c6a4122a37bb", "row_index": 280, "timestamp": "2017-05-27T05:14:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac7f5c19-14c1-4ed4-9de2-c6a4122a37bb", "eventTime": "2017-05-27T05:14:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIASYNF56V9J8KD6Q2S", "expiration": "May 27, 2017 6:14:57 AM", "sessionToken": "FQoDYXdzECYaDK9Bna8M7dkX0P+OoCLMAemdrltXBm/UILzc5KGQ4kCTBBiInPZ5hmHJ1I9ud+Yh0GBbktGDp6efmZpWXsKphHnAxAc/zT3Gev9WEDMaQ7ET3o+otq4kltR2SKVUiodVNFIn9l529MowN+Y9GKxkhgW/wqisFCFlGxt2VdeLLE38WP113pgPRaze1qoDxRYBOmtWEJshJp9XSeai8pkId6ot9sgeHdpA4K4UuYNm8M7+kwGh7bcHC6A297WqR8K57uPgwCWLEiXCzsAJ8E2BXe82hlgA5SE1IZs2ZSjRlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "660fc1f8-59e2-4340-b70d-c5f057c7ab01", "record_id": "flaws_cloudtrail:0000281:660fc1f8-59e2-4340-b70d-c5f057c7ab01", "row_index": 281, "timestamp": "2017-05-27T05:14:58Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASYNF56V9J8KD6Q2S", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "660fc1f8-59e2-4340-b70d-c5f057c7ab01", "eventTime": "2017-05-27T05:14:58Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASYNF56V9J8KD6Q2S", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6e814ef-232f-4074-9f0d-c12ca157c052", "record_id": "flaws_cloudtrail:0000282:a6e814ef-232f-4074-9f0d-c12ca157c052", "row_index": 282, "timestamp": "2017-05-27T05:14:58Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASYNF56V9J8KD6Q2S", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6e814ef-232f-4074-9f0d-c12ca157c052", "eventTime": "2017-05-27T05:14:58Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASYNF56V9J8KD6Q2S", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec26f14f-08c2-4eea-9f02-35bb6a657293", "record_id": "flaws_cloudtrail:0000283:ec26f14f-08c2-4eea-9f02-35bb6a657293", "row_index": 283, "timestamp": "2017-05-27T05:14:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec26f14f-08c2-4eea-9f02-35bb6a657293", "eventTime": "2017-05-27T05:14:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2P7A0L18RK78SSE3", "expiration": "May 27, 2017 6:14:58 AM", "sessionToken": "FQoDYXdzECYaDBj5vZNrm/zm99kMXiLMAX/fpR9LTTyJ/UzTdleJBN5Rh3TyRs0z7nuX2Ziw6MD4ZdT0MaT0n7swGGJ2ccOQiVuOoNxuj0gl/mkYjoSDgB8rz9Z4iBo29Vwn+IMQmQQUfi1x5BCJ8IUXipoKDVSP5Nlc2ZnmJKp4Z5fsHoKGaPJCeEaVYLTlORjSspPjX4I8W9H7Z5vh7H57SO14ModoqKi9YOWmpfhVDhyR5wOxQfmK4rTYLcCMNe4QDR+ZrKwuERlDdnoY72QC3ngvlxiWi/7e6WwzdJaxtZa7DyjSlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "908099c-5ce8-41b0-b959-21d451788", "record_id": "flaws_cloudtrail:0000284:908099c-5ce8-41b0-b959-21d451788", "row_index": 284, "timestamp": "2017-05-27T05:14:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "908099c-5ce8-41b0-b959-21d451788", "eventTime": "2017-05-27T05:14:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5VOQ8S70H29E5HW4", "expiration": "May 27, 2017 6:14:59 AM", "sessionToken": "FQoDYXdzECYaDP25zZu0SbxN9S7X5yLMAUEH/Gg9pdtaifai7KUPEPYS0lNSsrXC2NdNHQxGsFWbQnHA1Jg/M04Av8CRv425VJoTvCQDjUHcLiJtpDlWr7GoMQ/mOkSn25/kfxWw58h4MkZAka4Ql1clbw5g/MZYCSZzpOTNVlk7cwgEFHATJpdJe1+igU2E1mB/Iy+jQxsr5a2NofcsTfxC1t35+xYqmoqGMRSiRw0ZtBs3Gnp+uRkdh4P/bCNdK4a9p3Bd8UwJyASbtY1POEXn6UYJdR2N4qh2NmU3As7m5KmxaCjTlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d7e28a3-50ff-4e88-9be0-8a72ddee509d", "record_id": "flaws_cloudtrail:0000285:7d7e28a3-50ff-4e88-9be0-8a72ddee509d", "row_index": 285, "timestamp": "2017-05-27T05:14:59Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA2P7A0L18RK78SSE3", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d7e28a3-50ff-4e88-9be0-8a72ddee509d", "eventTime": "2017-05-27T05:14:59Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA2P7A0L18RK78SSE3", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c35d5986-7990-4665-b55c-00d462037546", "record_id": "flaws_cloudtrail:0000286:c35d5986-7990-4665-b55c-00d462037546", "row_index": 286, "timestamp": "2017-05-27T05:15:00Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5VOQ8S70H29E5HW4", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c35d5986-7990-4665-b55c-00d462037546", "eventTime": "2017-05-27T05:15:00Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5VOQ8S70H29E5HW4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:14:59Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "348d62d4-16dd-466c-ab6d-a37992241697", "record_id": "flaws_cloudtrail:0000287:348d62d4-16dd-466c-ab6d-a37992241697", "row_index": 287, "timestamp": "2017-05-27T05:15:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "348d62d4-16dd-466c-ab6d-a37992241697", "eventTime": "2017-05-27T05:15:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9ZBNXMA02JYVC0E3", "expiration": "May 27, 2017 6:15:01 AM", "sessionToken": "FQoDYXdzECYaDH1TXefxWme+hcXsgSLMAYvPglHHsYpPxfLwmYuHEF1SM9BTdpbtQmRCHEyhcbTKkqTXm19PGYCPAWfKldW01Xr8GcccVgeb/lRQY3uWxalpPluh96zf+LavXYxXj8CqKWh7QPmKRqq0VpKWsL27vNmyz26INm/wTknVlWjB9go2HlFZalSgNtYsCj0N+V6rOSQ03SG298GvEThejK+gtBivznCLSNzVGHUydnHoZUK7DhMwdswH4f8av3jQC/DFI/EhqNrcJj1DnqJO3LQPXyLw696Fgxk6HxxgFCjVlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffc9c845-10db-4bce-b452-cf5ede4711f6", "record_id": "flaws_cloudtrail:0000288:ffc9c845-10db-4bce-b452-cf5ede4711f6", "row_index": 288, "timestamp": "2017-05-27T05:15:02Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9ZBNXMA02JYVC0E3", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffc9c845-10db-4bce-b452-cf5ede4711f6", "eventTime": "2017-05-27T05:15:02Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9ZBNXMA02JYVC0E3", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:15:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc783c11-32da-43e9-81f5-d5b05674d47", "record_id": "flaws_cloudtrail:0000289:dc783c11-32da-43e9-81f5-d5b05674d47", "row_index": 289, "timestamp": "2017-05-27T05:15:02Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc783c11-32da-43e9-81f5-d5b05674d47", "eventTime": "2017-05-27T05:15:02Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIACSEH5GGJ6JQQR8ZZ", "expiration": "May 27, 2017 6:15:02 AM", "sessionToken": "FQoDYXdzECYaDGUniZCa3ILs20sVNCLMAWs9ZbXE7N0AvrX1PTXUFQZfQZbMvh6lN8l8hV1wQPlynDhXH4/NvIQ4fsQMEE5GK2AZGJ6lFxtd5KqAAi+kXf/q92VK3UmMmqTxlsMmw22fskT3BBrxLy3uc5MOcAiJ3V9rVkdaPXJFI+q4dKWdTZhhRI101o4J1SOhtL/VZZbkSzpFjilO11egig8IUggNN7KSur9yC3Ymwo3bMNIu6cDBB54kmO/WvUBPMH7z0izMJ8+9q/oHFjbJQV9QzLPCFeoT4Vv+zBEuJlro+ijWlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "836557a6-ac34-43c2-8768-46d01609", "record_id": "flaws_cloudtrail:0000290:836557a6-ac34-43c2-8768-46d01609", "row_index": 290, "timestamp": "2017-05-27T05:15:03Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACSEH5GGJ6JQQR8ZZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "836557a6-ac34-43c2-8768-46d01609", "eventTime": "2017-05-27T05:15:03Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACSEH5GGJ6JQQR8ZZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:15:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad156ed5-0209-4992-943f-380739558829", "record_id": "flaws_cloudtrail:0000291:ad156ed5-0209-4992-943f-380739558829", "row_index": 291, "timestamp": "2017-05-27T05:15:03Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad156ed5-0209-4992-943f-380739558829", "eventTime": "2017-05-27T05:15:03Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3O2S72XCFHQIYW4E", "expiration": "May 27, 2017 6:15:03 AM", "sessionToken": "FQoDYXdzECYaDLCDW4fw1EqEAsUMCSLMAWwbpOkU/W6JAbnWazSRIUu3lsdezNsuDpUvTWUgXAEkt4VqLuUu/EYC+RVmn8qYTuY9Rgi6ezVveuU2Gn/SO3YDSnf0nwCS1ymU7+Rie4V1VABblO+h+g+QE/dLQSgX+0PSv0v50QZMi1YUJSn03MfMqMU+riEPbTf5iGN+5s+wi1ty171WmPq/NV7x5rXDoV7e3jQKbTSTQkGoIz8UxoFlHqKqTgYzhqvVZTKI7iD5yDp4Oi65H6tSQde04Q9b1CFLk6SXfzXbJKhw0SjXlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87012e-e9be-455d-941c-e92fbddbc0fd", "record_id": "flaws_cloudtrail:0000292:87012e-e9be-455d-941c-e92fbddbc0fd", "row_index": 292, "timestamp": "2017-05-27T05:15:04Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3O2S72XCFHQIYW4E", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87012e-e9be-455d-941c-e92fbddbc0fd", "eventTime": "2017-05-27T05:15:04Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3O2S72XCFHQIYW4E", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:15:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "619203f0-51f4-4425-aa52-74cf12b0d99a", "record_id": "flaws_cloudtrail:0000293:619203f0-51f4-4425-aa52-74cf12b0d99a", "row_index": 293, "timestamp": "2017-05-27T05:15:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "619203f0-51f4-4425-aa52-74cf12b0d99a", "eventTime": "2017-05-27T05:15:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJNNNNJSI89HEWOBM", "expiration": "May 27, 2017 6:15:05 AM", "sessionToken": "FQoDYXdzECYaDCza2vKHPKmLKUmNhyLMAUeCS2nSdEWWUeXWqXDcXbUAPliMr7HX5yXFcAymOMJL3d4tzl0P9wjmhsP1MN+UlV6e0xr+WIf7SVAfppptOjySyoJysYADfISTB8ak8wFCxSFh2G34KRYyBEPBim1MZysqt0IGmjaygdayyunPMf/J+6xBV9uQP7YJ1ZvafItFqnV2cUE6G20MfkrmAzY/UV4rVZEuAentkJcT+3iMOmG78FHCD8mUcc7Fi2oVH1yVMG9ByYMn1qNUovBUOvwcpQonFgvhMrTthVbKwyjZlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01699d-22ac-4f48-a84d-03245f512d38", "record_id": "flaws_cloudtrail:0000294:01699d-22ac-4f48-a84d-03245f512d38", "row_index": 294, "timestamp": "2017-05-27T05:15:06Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAJNNNNJSI89HEWOBM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01699d-22ac-4f48-a84d-03245f512d38", "eventTime": "2017-05-27T05:15:06Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAJNNNNJSI89HEWOBM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:15:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dd0c8f5-4103-4bb8-9b60-9f0e19b9b0ab", "record_id": "flaws_cloudtrail:0000295:5dd0c8f5-4103-4bb8-9b60-9f0e19b9b0ab", "row_index": 295, "timestamp": "2017-05-27T05:15:06Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dd0c8f5-4103-4bb8-9b60-9f0e19b9b0ab", "eventTime": "2017-05-27T05:15:06Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA42Q76AIHMGAMR29M", "expiration": "May 27, 2017 6:15:06 AM", "sessionToken": "FQoDYXdzECYaDEplGhQkg/2TZlsXGiLMAQxk0OBbUNgDOChd45oe24r37leFLXJS5ZOu4JTS+UBqa7ATP8ffDUXbz5fdVoWG9iUQFhLXcL4R1PkDo0HllYMTCR9r6dvOVOZmsQk4PI77VMtw8FVcu3PVK1xpkekCH6huCZ/AXm8Lzy3b7FydMDM6oc69H0E1UmqYtuDdEyTFh++yWhPCvbhXDa3JVzrFvownklwOMkXLpwih8Ap1c7oJTJJLKoyT28Bki55y9YvSZgt9jEqAdfhafL8bpM5S8sWCmgWvZSFLGzGqHyjalqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3479adeb-9c51-4497-9705-385a044d2af9", "record_id": "flaws_cloudtrail:0000296:3479adeb-9c51-4497-9705-385a044d2af9", "row_index": 296, "timestamp": "2017-05-27T05:15:07Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA42Q76AIHMGAMR29M", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3479adeb-9c51-4497-9705-385a044d2af9", "eventTime": "2017-05-27T05:15:07Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA42Q76AIHMGAMR29M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:15:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d334bb3-f973-403b-b832-665234c45db9", "record_id": "flaws_cloudtrail:0000297:5d334bb3-f973-403b-b832-665234c45db9", "row_index": 297, "timestamp": "2017-05-27T05:15:07Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d334bb3-f973-403b-b832-665234c45db9", "eventTime": "2017-05-27T05:15:07Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0G2HRSX1BI6JZGAD", "expiration": "May 27, 2017 6:15:07 AM", "sessionToken": "FQoDYXdzECYaDDd696S2wp0RmZ2kaCLMAbFFdeO7b539hQbPhb0UfdJ5icZiT+9V2QcGLgyUlNsNsRyFD8LRH1mFZq/bITujL8KOAid281VgY+qMWhDK2rPGALIdfot6N3qs8rfS6WNMWbS1lHobEs/HotkgmiUyK/nchbazxA7x8qFsLA0Xjd0pUtQqrDhvNOF08VPO1I03LyjcN32ep0AA3hyPEptSdzyDT3Y1lyHpRFYb4GJ4EojGbP68Peyv6vM+WPodowXr6CrPrg9M9sRoDhnXA/dVvtjaGvqxNmZD66EuHyjblqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59e9d3a7-2516-4ab2-8a90-b6a0f7f7b756", "record_id": "flaws_cloudtrail:0000298:59e9d3a7-2516-4ab2-8a90-b6a0f7f7b756", "row_index": 298, "timestamp": "2017-05-27T05:15:08Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0G2HRSX1BI6JZGAD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59e9d3a7-2516-4ab2-8a90-b6a0f7f7b756", "eventTime": "2017-05-27T05:15:08Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0G2HRSX1BI6JZGAD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:15:07Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fb2cb95-a08b-4b69-9a78-1a4c44201bc3", "record_id": "flaws_cloudtrail:0000299:5fb2cb95-a08b-4b69-9a78-1a4c44201bc3", "row_index": 299, "timestamp": "2017-05-27T05:15:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fb2cb95-a08b-4b69-9a78-1a4c44201bc3", "eventTime": "2017-05-27T05:15:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8USBXW6XNOF7OFJZ", "expiration": "May 27, 2017 6:15:08 AM", "sessionToken": "FQoDYXdzECYaDPAIUOgFNy3zN0/z4SLMATS/oh2zsm9g8HJrtJKyr6Du8/cCVbIWOa2vkBs+NOP6HmEMLeZfEWVlfK0zM36rYUShpDlNdp1Xt6iDNZYnAqIiYPT67FC++l/wDl3TIU7t6Kd3+d7cF8nvsbeAZoqsHOGbxniKY1GbtrGb7mUvV2wxiv7TZHrtr902/D9wh/Dvw06l/o20yu553ihtwosdYRk6fUDAzzsvmd6iZsMTMQdGsjxjBQmBLmqNWsNg5qXnbYveV8VUlcAvERnCBT+lwflsl3X4EJLGKrOqtijclqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b5b88cd-657d-4990-bd53-b50a6f25a2ed", "record_id": "flaws_cloudtrail:0000300:6b5b88cd-657d-4990-bd53-b50a6f25a2ed", "row_index": 300, "timestamp": "2017-05-27T05:15:09Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8USBXW6XNOF7OFJZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b5b88cd-657d-4990-bd53-b50a6f25a2ed", "eventTime": "2017-05-27T05:15:09Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8USBXW6XNOF7OFJZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:15:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13b634d4-a713-46d1-b78b-6f51203bee10", "record_id": "flaws_cloudtrail:0000301:13b634d4-a713-46d1-b78b-6f51203bee10", "row_index": 301, "timestamp": "2017-05-27T05:15:10Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13b634d4-a713-46d1-b78b-6f51203bee10", "eventTime": "2017-05-27T05:15:10Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAELEAUNP8XHZQ3BEU", "expiration": "May 27, 2017 6:15:10 AM", "sessionToken": "FQoDYXdzECYaDBEhSJ5liESZ+Rr8jCLMASK9sCDuYtUAik+Yk8AXqb1BWtuNzG8tCai4KnJJGIIpNvjXYTxMmH6Gsj43qpiUCK69/5MpBU5bOdiX0shFWJDa8DWgMDBLbcJFCTTP4NR6+GT0gksPdssrE95ZAt4yv0eFziHm+J4XkGM6WUdeu34N3JMZrUnKficjyFegVt5gI37vQvoIXws5pWFWjfesTjzEzOZSJxPdqP6CdRB1uqxMxNP8nLXzxCfzkm8vz8Cx5yJn+jtnMUq1HEWDszoYbLGFZukVFtcQvWDrpSjelqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea8f5787-9956-4574-b7d4-87ccf038e9b5", "record_id": "flaws_cloudtrail:0000302:ea8f5787-9956-4574-b7d4-87ccf038e9b5", "row_index": 302, "timestamp": "2017-05-27T05:15:11Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAELEAUNP8XHZQ3BEU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea8f5787-9956-4574-b7d4-87ccf038e9b5", "eventTime": "2017-05-27T05:15:11Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAELEAUNP8XHZQ3BEU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:15:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b5b13c0-ad0d-46e5-9f28-79482ddd00", "record_id": "flaws_cloudtrail:0000303:4b5b13c0-ad0d-46e5-9f28-79482ddd00", "row_index": 303, "timestamp": "2017-05-27T05:15:11Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b5b13c0-ad0d-46e5-9f28-79482ddd00", "eventTime": "2017-05-27T05:15:11Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIASXZVP9OB0RWWCWVO", "expiration": "May 27, 2017 6:15:11 AM", "sessionToken": "FQoDYXdzECYaDMZBj80rCzYuGPLX/SLMAcT16AItIGm8Q4EV5lsqXSdZE4kV8OxbB8dPmqQav2Zo8UVRYbHICGzK/7rFYGInPluPAkiVb+O0HPZBNsRz3DEWVVtR+Q7GGy7SuGupECfU7yUlVw3wZFkrh+9yclMqi6EDHLFQvwuCoIrjAQe2PNZ4+gzotjA6moJDSveV9g9Z95GDd60W4ZjTgD/SLe/wEgFlE8sCX/FQoDfmy4A3x6DmYBxagY4LXNIOR/AST1Dfd+3nMkAs+N3HnEJZvZQ5WLB7grnTN3vcU0xkjSjflqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "090ea8c9-f3bc-4c36-8638-daad82046f40", "record_id": "flaws_cloudtrail:0000304:090ea8c9-f3bc-4c36-8638-daad82046f40", "row_index": 304, "timestamp": "2017-05-27T05:15:12Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASXZVP9OB0RWWCWVO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "090ea8c9-f3bc-4c36-8638-daad82046f40", "eventTime": "2017-05-27T05:15:12Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASXZVP9OB0RWWCWVO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:15:11Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fb308711-f5d7-4c3c-9c25-4024e0c56dd5", "record_id": "flaws_cloudtrail:0000305:4fb308711-f5d7-4c3c-9c25-4024e0c56dd5", "row_index": 305, "timestamp": "2017-05-27T05:15:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fb308711-f5d7-4c3c-9c25-4024e0c56dd5", "eventTime": "2017-05-27T05:15:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5ZOU0YSK59ZF6ZLL", "expiration": "May 27, 2017 6:15:12 AM", "sessionToken": "FQoDYXdzECYaDKmT9CtKjr8zN4DhISLMAQuBsIR36EpFCKEP6oGCKaHQ0MDNT0cDbMAy5g122nloDsYLR/Y4t1SupPCXcvM3+OGasPCMmlMQEfVcWJVV3I60Ul3fptHq4ZVhbv15SQOHjHAol8YSUTBP6Wb+NPRnjSZHmKtbo54EH/choq0L3PyiN3QXDnDdDq36lLInT2VJmwdsIQgShMeCIXuvSRxbMl/A3YOxP7OTfLcDiHyXfDbNK+2JycPcww4Di/v2hbuZ5aL0XoKmaOJ5RgOv6SlR+498wZAgmIjL0y6aRSjglqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d05c72d-49ca-4d61-8312-b6408c3e2d9e", "record_id": "flaws_cloudtrail:0000306:6d05c72d-49ca-4d61-8312-b6408c3e2d9e", "row_index": 306, "timestamp": "2017-05-27T05:15:13Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5ZOU0YSK59ZF6ZLL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d05c72d-49ca-4d61-8312-b6408c3e2d9e", "eventTime": "2017-05-27T05:15:13Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5ZOU0YSK59ZF6ZLL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:15:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "216e1e2a-1ae4-42b9-a76c-ee0f3c786403", "record_id": "flaws_cloudtrail:0000307:216e1e2a-1ae4-42b9-a76c-ee0f3c786403", "row_index": 307, "timestamp": "2017-05-27T05:15:13Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "216e1e2a-1ae4-42b9-a76c-ee0f3c786403", "eventTime": "2017-05-27T05:15:13Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5QXD5ESHPUEFO26M", "expiration": "May 27, 2017 6:15:13 AM", "sessionToken": "FQoDYXdzECYaDPvxL+u1//Wx0nT2uCLMARJUZmXoQDNeSebh+NlfixV4k3efmQgdd2kHysoLWla712cHcuRGlrRKW+2ue0DMHtf+bMh3wq8ZceGvCqPcLnj8zPVVfSxteGj9u0CZsbYhhK/ZGvzPcwaNyXpbXySXpN3yCDYr2c9rfmLuIsRS5kq+/f6bok4DP0+7A/Hu1DQHbwxgQoOzSWIO2+JPCQ+CWNXDDiR3bfQv7wUAOi+8orl/YvrMWXQWvDwx8KbKOYbWvTAwijcQGYUkUGwIHftpoNQU9BWXtgUXgW04XCjhlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6aa8279-d00b-4c6c-aa7e-935dfd7bd620", "record_id": "flaws_cloudtrail:0000308:c6aa8279-d00b-4c6c-aa7e-935dfd7bd620", "row_index": 308, "timestamp": "2017-05-27T05:15:14Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6aa8279-d00b-4c6c-aa7e-935dfd7bd620", "eventTime": "2017-05-27T05:15:14Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIACUB6KJOJ4IL9DATI", "expiration": "May 27, 2017 6:15:14 AM", "sessionToken": "FQoDYXdzECYaDOJg7aXuADeAQe85WSLMAUryFnwaN2oJO48xSh5l2TfdxAmJfdMlN0ee1Qb3cpilYeTmzARI0NPDDuc+nC8SUDaLdQt6WraL4LPtckbWmgPDppN0YDG8otjXaF8MpqKUiiWO+6HBI4jeRyownB6fPRrhsDV9n6R3eo38VnZhx5sBHf/FPDjp3TJamzRV6MRKx7OWf8u69ZFU5QrF1zi3F4nMDSmus9it6gSGLja2ezIB6FZH/Z7TH2fVOlwPDTmdTh3YqUlexoGpqusN8RahS69bTuiQu9IHT40TuijilqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9765b780-2ea7-41d7-ae4c-0cd39cc27b3b", "record_id": "flaws_cloudtrail:0000309:9765b780-2ea7-41d7-ae4c-0cd39cc27b3b", "row_index": 309, "timestamp": "2017-05-27T05:15:14Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5QXD5ESHPUEFO26M", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9765b780-2ea7-41d7-ae4c-0cd39cc27b3b", "eventTime": "2017-05-27T05:15:14Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5QXD5ESHPUEFO26M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:15:13Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43126c-3a5e-4113-8a36-f187513", "record_id": "flaws_cloudtrail:0000310:43126c-3a5e-4113-8a36-f187513", "row_index": 310, "timestamp": "2017-05-27T05:15:14Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACUB6KJOJ4IL9DATI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43126c-3a5e-4113-8a36-f187513", "eventTime": "2017-05-27T05:15:14Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACUB6KJOJ4IL9DATI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:15:14Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "427e3092-4284-47a5-927b-da0ac972c69c", "record_id": "flaws_cloudtrail:0000311:427e3092-4284-47a5-927b-da0ac972c69c", "row_index": 311, "timestamp": "2017-05-27T05:15:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "427e3092-4284-47a5-927b-da0ac972c69c", "eventTime": "2017-05-27T05:15:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQOXD78JBTZXTLET9", "expiration": "May 27, 2017 6:15:15 AM", "sessionToken": "FQoDYXdzECYaDKCQ3HkpXTGHlR3UqyLMAW4rgK4GtBcmYORT8qbduyI5LSS9x+xbW8ye0MkZYAQwXP9Vk9Y02zFCZICyc98Jy+Y3wCzDpCuKpOM4Z76f5LSCdOk+GwnWnc9lsGXdWSu+wQb2A1A3nnP0imG2Bh5Jr2xdolqtiTQS6vV7IFIlcVlA9/cim6PPYDdc0c2ZRHNo+P03AqSM7Pg3mpt6dG+OEgdDN0/Fg4Rv9+sH9Hk+Nobx6VGhWs/Zargn+7RD3j2ZbiCixLvaj1NyjaPinfvOy+FLsOpr5DRiDF3pNyjjlqTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b321c31-cbcb-4645-bcf8-01f19a4b0e15", "record_id": "flaws_cloudtrail:0000312:0b321c31-cbcb-4645-bcf8-01f19a4b0e15", "row_index": 312, "timestamp": "2017-05-27T05:15:15Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1033, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b321c31-cbcb-4645-bcf8-01f19a4b0e15", "eventTime": "2017-05-27T05:15:15Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60d418a1-8a13-46a8-aa2d-1f9be9dd70c9", "record_id": "flaws_cloudtrail:0000313:60d418a1-8a13-46a8-aa2d-1f9be9dd70c9", "row_index": 313, "timestamp": "2017-05-27T05:15:15Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 946, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60d418a1-8a13-46a8-aa2d-1f9be9dd70c9", "eventTime": "2017-05-27T05:15:15Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a1cacf3-9608-4fed-afcd-6fd66cbb03cc", "record_id": "flaws_cloudtrail:0000314:0a1cacf3-9608-4fed-afcd-6fd66cbb03cc", "row_index": 314, "timestamp": "2017-05-27T05:15:15Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQOXD78JBTZXTLET9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a1cacf3-9608-4fed-afcd-6fd66cbb03cc", "eventTime": "2017-05-27T05:15:15Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQOXD78JBTZXTLET9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:15:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b099ba8-c841-439c-ba13-7680c9dab77d", "record_id": "flaws_cloudtrail:0000315:8b099ba8-c841-439c-ba13-7680c9dab77d", "row_index": 315, "timestamp": "2017-05-27T05:15:16Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b099ba8-c841-439c-ba13-7680c9dab77d", "eventTime": "2017-05-27T05:15:16Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b979e34-2753-4e4d-aebc-256f97a8be58", "record_id": "flaws_cloudtrail:0000316:1b979e34-2753-4e4d-aebc-256f97a8be58", "row_index": 316, "timestamp": "2017-05-27T05:15:16Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b979e34-2753-4e4d-aebc-256f97a8be58", "eventTime": "2017-05-27T05:15:16Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cbc5115-6df4-4dc4-abdd-c8f67edb0640", "record_id": "flaws_cloudtrail:0000317:6cbc5115-6df4-4dc4-abdd-c8f67edb0640", "row_index": 317, "timestamp": "2017-05-27T05:15:16Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cbc5115-6df4-4dc4-abdd-c8f67edb0640", "eventTime": "2017-05-27T05:15:16Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b80189f-49ba-4419-8d75-34fe3e94099", "record_id": "flaws_cloudtrail:0000318:6b80189f-49ba-4419-8d75-34fe3e94099", "row_index": 318, "timestamp": "2017-05-27T05:15:16Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b80189f-49ba-4419-8d75-34fe3e94099", "eventTime": "2017-05-27T05:15:16Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60adfc0c-263a-4f3b-8797-00c6fd869351", "record_id": "flaws_cloudtrail:0000319:60adfc0c-263a-4f3b-8797-00c6fd869351", "row_index": 319, "timestamp": "2017-05-27T05:15:16Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1152, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60adfc0c-263a-4f3b-8797-00c6fd869351", "eventTime": "2017-05-27T05:15:16Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "700a7131-44ba-4e16-a937-878dd71a06a7", "record_id": "flaws_cloudtrail:0000320:700a7131-44ba-4e16-a937-878dd71a06a7", "row_index": 320, "timestamp": "2017-05-27T05:15:16Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "700a7131-44ba-4e16-a937-878dd71a06a7", "eventTime": "2017-05-27T05:15:16Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4d5e805-4cc6-47c3-af0d-f432d97fa75d", "record_id": "flaws_cloudtrail:0000321:d4d5e805-4cc6-47c3-af0d-f432d97fa75d", "row_index": 321, "timestamp": "2017-05-27T05:15:16Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4d5e805-4cc6-47c3-af0d-f432d97fa75d", "eventTime": "2017-05-27T05:15:16Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6332db5f-e422-48d6-b300-8bb31c44c775", "record_id": "flaws_cloudtrail:0000322:6332db5f-e422-48d6-b300-8bb31c44c775", "row_index": 322, "timestamp": "2017-05-27T05:15:17Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6332db5f-e422-48d6-b300-8bb31c44c775", "eventTime": "2017-05-27T05:15:17Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5157ab6-a717-4530-8ebc-327322b2ec2a", "record_id": "flaws_cloudtrail:0000323:c5157ab6-a717-4530-8ebc-327322b2ec2a", "row_index": 323, "timestamp": "2017-05-27T05:15:17Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1139, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5157ab6-a717-4530-8ebc-327322b2ec2a", "eventTime": "2017-05-27T05:15:17Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e34dafb1-87b1-40ce-bab8-d2cad8acbbea", "record_id": "flaws_cloudtrail:0000324:e34dafb1-87b1-40ce-bab8-d2cad8acbbea", "row_index": 324, "timestamp": "2017-05-27T05:15:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e34dafb1-87b1-40ce-bab8-d2cad8acbbea", "eventTime": "2017-05-27T05:15:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a78e3b9-1b0d-4195-a841-4901d1b05398", "record_id": "flaws_cloudtrail:0000325:8a78e3b9-1b0d-4195-a841-4901d1b05398", "row_index": 325, "timestamp": "2017-05-27T05:15:17Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a78e3b9-1b0d-4195-a841-4901d1b05398", "eventTime": "2017-05-27T05:15:17Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "615aa766-2361-4682-a649-5964e618659bc", "record_id": "flaws_cloudtrail:0000326:615aa766-2361-4682-a649-5964e618659bc", "row_index": 326, "timestamp": "2017-05-27T05:15:17Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "615aa766-2361-4682-a649-5964e618659bc", "eventTime": "2017-05-27T05:15:17Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchWebsiteConfiguration", "errorMessage": "The specified bucket does not have a website configuration", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5155ac9-6fdd-43f4-9951-69fbc7017bdf", "record_id": "flaws_cloudtrail:0000327:f5155ac9-6fdd-43f4-9951-69fbc7017bdf", "row_index": 327, "timestamp": "2017-05-27T05:15:17Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1038, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5155ac9-6fdd-43f4-9951-69fbc7017bdf", "eventTime": "2017-05-27T05:15:17Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f75cc02-388a-4e9e-b253-0adb96cd9acc", "record_id": "flaws_cloudtrail:0000328:9f75cc02-388a-4e9e-b253-0adb96cd9acc", "row_index": 328, "timestamp": "2017-05-27T05:15:18Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f75cc02-388a-4e9e-b253-0adb96cd9acc", "eventTime": "2017-05-27T05:15:18Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8df1ece9-362c-4e31-bd0a-939983d64e16", "record_id": "flaws_cloudtrail:0000329:8df1ece9-362c-4e31-bd0a-939983d64e16", "row_index": 329, "timestamp": "2017-05-27T05:15:18Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 999, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8df1ece9-362c-4e31-bd0a-939983d64e16", "eventTime": "2017-05-27T05:15:18Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56d71206-0ebf-4180-bbbd-b13b372ee9b6", "record_id": "flaws_cloudtrail:0000330:56d71206-0ebf-4180-bbbd-b13b372ee9b6", "row_index": 330, "timestamp": "2017-05-27T05:15:18Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56d71206-0ebf-4180-bbbd-b13b372ee9b6", "eventTime": "2017-05-27T05:15:18Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d27271c-ddc0-4792-b483-0aa635179c97", "record_id": "flaws_cloudtrail:0000331:d27271c-ddc0-4792-b483-0aa635179c97", "row_index": 331, "timestamp": "2017-05-27T05:15:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d27271c-ddc0-4792-b483-0aa635179c97", "eventTime": "2017-05-27T05:15:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d43a2823-81dd-40e0-821d-cd30a7b267c8", "record_id": "flaws_cloudtrail:0000332:d43a2823-81dd-40e0-821d-cd30a7b267c8", "row_index": 332, "timestamp": "2017-05-27T05:15:18Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d43a2823-81dd-40e0-821d-cd30a7b267c8", "eventTime": "2017-05-27T05:15:18Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6121fcd2-38b4-4f9b-baf8-2906f049b8bf", "record_id": "flaws_cloudtrail:0000333:6121fcd2-38b4-4f9b-baf8-2906f049b8bf", "row_index": 333, "timestamp": "2017-05-27T05:15:18Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6121fcd2-38b4-4f9b-baf8-2906f049b8bf", "eventTime": "2017-05-27T05:15:18Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "779f2afa-b6a0-4b17-a9af-4726fb00c621", "record_id": "flaws_cloudtrail:0000334:779f2afa-b6a0-4b17-a9af-4726fb00c621", "row_index": 334, "timestamp": "2017-05-27T05:15:19Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "779f2afa-b6a0-4b17-a9af-4726fb00c621", "eventTime": "2017-05-27T05:15:19Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e9e12cb-4549-4c6e-8c50-672e8b100ef0", "record_id": "flaws_cloudtrail:0000335:0e9e12cb-4549-4c6e-8c50-672e8b100ef0", "row_index": 335, "timestamp": "2017-05-27T05:15:19Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e9e12cb-4549-4c6e-8c50-672e8b100ef0", "eventTime": "2017-05-27T05:15:19Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "049ec77e-861c-4f21-945e-67a195bca6a8", "record_id": "flaws_cloudtrail:0000336:049ec77e-861c-4f21-945e-67a195bca6a8", "row_index": 336, "timestamp": "2017-05-27T05:15:19Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "049ec77e-861c-4f21-945e-67a195bca6a8", "eventTime": "2017-05-27T05:15:19Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93891f-7aa0-4cd2-89c8-92e8a26838", "record_id": "flaws_cloudtrail:0000337:93891f-7aa0-4cd2-89c8-92e8a26838", "row_index": 337, "timestamp": "2017-05-27T05:15:19Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93891f-7aa0-4cd2-89c8-92e8a26838", "eventTime": "2017-05-27T05:15:19Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d63996-4f2d-4af9-9400-93b67c986344c", "record_id": "flaws_cloudtrail:0000338:1d63996-4f2d-4af9-9400-93b67c986344c", "row_index": 338, "timestamp": "2017-05-27T05:15:19Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d63996-4f2d-4af9-9400-93b67c986344c", "eventTime": "2017-05-27T05:15:19Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5eae6bd3-aa40-4036-94fd-ea372138da1d", "record_id": "flaws_cloudtrail:0000339:5eae6bd3-aa40-4036-94fd-ea372138da1d", "row_index": 339, "timestamp": "2017-05-27T05:15:19Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1000, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5eae6bd3-aa40-4036-94fd-ea372138da1d", "eventTime": "2017-05-27T05:15:19Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a914284f-a287-4ed2-8422-994864c7c22d", "record_id": "flaws_cloudtrail:0000340:8a914284f-a287-4ed2-8422-994864c7c22d", "row_index": 340, "timestamp": "2017-05-27T05:15:19Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a914284f-a287-4ed2-8422-994864c7c22d", "eventTime": "2017-05-27T05:15:19Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "370b5668-bf1d-4079-b10e-9853d1fc9479", "record_id": "flaws_cloudtrail:0000341:370b5668-bf1d-4079-b10e-9853d1fc9479", "row_index": 341, "timestamp": "2017-05-27T05:15:19Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "370b5668-bf1d-4079-b10e-9853d1fc9479", "eventTime": "2017-05-27T05:15:19Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "965791c08-9d31-401c-9bb3-766bc45656f3", "record_id": "flaws_cloudtrail:0000342:965791c08-9d31-401c-9bb3-766bc45656f3", "row_index": 342, "timestamp": "2017-05-27T05:15:19Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "965791c08-9d31-401c-9bb3-766bc45656f3", "eventTime": "2017-05-27T05:15:19Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9995f96-b9ff-4bd2-8437-2d773eadbc80", "record_id": "flaws_cloudtrail:0000343:e9995f96-b9ff-4bd2-8437-2d773eadbc80", "row_index": 343, "timestamp": "2017-05-27T05:15:19Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9995f96-b9ff-4bd2-8437-2d773eadbc80", "eventTime": "2017-05-27T05:15:19Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc468ce0-e1b5-4e65-8071-dd12ae12c6cf", "record_id": "flaws_cloudtrail:0000344:dc468ce0-e1b5-4e65-8071-dd12ae12c6cf", "row_index": 344, "timestamp": "2017-05-27T05:15:20Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc468ce0-e1b5-4e65-8071-dd12ae12c6cf", "eventTime": "2017-05-27T05:15:20Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c22eacad-863f-44ff-885f-e4b2e19bed34", "record_id": "flaws_cloudtrail:0000345:c22eacad-863f-44ff-885f-e4b2e19bed34", "row_index": 345, "timestamp": "2017-05-27T05:15:20Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c22eacad-863f-44ff-885f-e4b2e19bed34", "eventTime": "2017-05-27T05:15:20Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "918915-a8ac-42e2-abf7-089b12e1578e", "record_id": "flaws_cloudtrail:0000346:918915-a8ac-42e2-abf7-089b12e1578e", "row_index": 346, "timestamp": "2017-05-27T05:15:20Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1149, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "918915-a8ac-42e2-abf7-089b12e1578e", "eventTime": "2017-05-27T05:15:20Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4815ec25-0ef9-486a-a89d-2e6e24f2e139", "record_id": "flaws_cloudtrail:0000347:4815ec25-0ef9-486a-a89d-2e6e24f2e139", "row_index": 347, "timestamp": "2017-05-27T05:15:20Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4815ec25-0ef9-486a-a89d-2e6e24f2e139", "eventTime": "2017-05-27T05:15:20Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c0e0674-1a29-4237-b66c-64cfd3897451", "record_id": "flaws_cloudtrail:0000348:0c0e0674-1a29-4237-b66c-64cfd3897451", "row_index": 348, "timestamp": "2017-05-27T05:15:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c0e0674-1a29-4237-b66c-64cfd3897451", "eventTime": "2017-05-27T05:15:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0130abf1-2c1a-4bcc-849a-bee65271ba90", "record_id": "flaws_cloudtrail:0000349:0130abf1-2c1a-4bcc-849a-bee65271ba90", "row_index": 349, "timestamp": "2017-05-27T05:15:22Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0130abf1-2c1a-4bcc-849a-bee65271ba90", "eventTime": "2017-05-27T05:15:22Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4177e9d-5dfe-4969-8519-51bb24106ac", "record_id": "flaws_cloudtrail:0000350:e4177e9d-5dfe-4969-8519-51bb24106ac", "row_index": 350, "timestamp": "2017-05-27T05:15:23Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4177e9d-5dfe-4969-8519-51bb24106ac", "eventTime": "2017-05-27T05:15:23Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f534a36-7db3-471f-aaa1-3030b437410", "record_id": "flaws_cloudtrail:0000351:0f534a36-7db3-471f-aaa1-3030b437410", "row_index": 351, "timestamp": "2017-05-27T05:15:23Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1115, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f534a36-7db3-471f-aaa1-3030b437410", "eventTime": "2017-05-27T05:15:23Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b421767-adc4-41f2-a80a-ddc3fe50a712", "record_id": "flaws_cloudtrail:0000352:b421767-adc4-41f2-a80a-ddc3fe50a712", "row_index": 352, "timestamp": "2017-05-27T05:15:23Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b421767-adc4-41f2-a80a-ddc3fe50a712", "eventTime": "2017-05-27T05:15:23Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b893455b-e80c-42c6-b1b1-c3fd86177", "record_id": "flaws_cloudtrail:0000353:7b893455b-e80c-42c6-b1b1-c3fd86177", "row_index": 353, "timestamp": "2017-05-27T05:15:24Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b893455b-e80c-42c6-b1b1-c3fd86177", "eventTime": "2017-05-27T05:15:24Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f87ecf1-6810-4cde-b3f1-1ee3c729008c6", "record_id": "flaws_cloudtrail:0000354:4f87ecf1-6810-4cde-b3f1-1ee3c729008c6", "row_index": 354, "timestamp": "2017-05-27T05:15:24Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f87ecf1-6810-4cde-b3f1-1ee3c729008c6", "eventTime": "2017-05-27T05:15:24Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4b9ecdd-5727-411d-98d0-e60e0235bb7a", "record_id": "flaws_cloudtrail:0000355:c4b9ecdd-5727-411d-98d0-e60e0235bb7a", "row_index": 355, "timestamp": "2017-05-27T05:15:24Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1025, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4b9ecdd-5727-411d-98d0-e60e0235bb7a", "eventTime": "2017-05-27T05:15:24Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb69154-ebf7-47bb-9ac1-4f2eea481e64", "record_id": "flaws_cloudtrail:0000356:cb69154-ebf7-47bb-9ac1-4f2eea481e64", "row_index": 356, "timestamp": "2017-05-27T05:15:24Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb69154-ebf7-47bb-9ac1-4f2eea481e64", "eventTime": "2017-05-27T05:15:24Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80e97b87-4202-4242-8546-624af72607b", "record_id": "flaws_cloudtrail:0000357:80e97b87-4202-4242-8546-624af72607b", "row_index": 357, "timestamp": "2017-05-27T05:15:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1021, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80e97b87-4202-4242-8546-624af72607b", "eventTime": "2017-05-27T05:15:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99b646c6-35c5-431c-bc05-f0d54877eb9", "record_id": "flaws_cloudtrail:0000358:99b646c6-35c5-431c-bc05-f0d54877eb9", "row_index": 358, "timestamp": "2017-05-27T05:15:24Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1116, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99b646c6-35c5-431c-bc05-f0d54877eb9", "eventTime": "2017-05-27T05:15:24Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dd935333-afc3-4939-9bb3-c6efd0a2c997", "record_id": "flaws_cloudtrail:0000359:5dd935333-afc3-4939-9bb3-c6efd0a2c997", "row_index": 359, "timestamp": "2017-05-27T05:15:24Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dd935333-afc3-4939-9bb3-c6efd0a2c997", "eventTime": "2017-05-27T05:15:24Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6c5c9ab-14b6-43a0-8245-6352a5dbf4bc", "record_id": "flaws_cloudtrail:0000360:a6c5c9ab-14b6-43a0-8245-6352a5dbf4bc", "row_index": 360, "timestamp": "2017-05-27T05:15:24Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6c5c9ab-14b6-43a0-8245-6352a5dbf4bc", "eventTime": "2017-05-27T05:15:24Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "066cc1ef-cab2-41a2-9205-38f0c49480a0", "record_id": "flaws_cloudtrail:0000361:066cc1ef-cab2-41a2-9205-38f0c49480a0", "row_index": 361, "timestamp": "2017-05-27T05:15:24Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1040, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "066cc1ef-cab2-41a2-9205-38f0c49480a0", "eventTime": "2017-05-27T05:15:24Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5e6d9cb-5c9e-4277-a1c1-c0fd91bcdb77", "record_id": "flaws_cloudtrail:0000362:a5e6d9cb-5c9e-4277-a1c1-c0fd91bcdb77", "row_index": 362, "timestamp": "2017-05-27T05:15:24Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1034, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5e6d9cb-5c9e-4277-a1c1-c0fd91bcdb77", "eventTime": "2017-05-27T05:15:24Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9943cbf-39ec-480a-a2b6-9504ab3a6669", "record_id": "flaws_cloudtrail:0000363:b9943cbf-39ec-480a-a2b6-9504ab3a6669", "row_index": 363, "timestamp": "2017-05-27T05:15:25Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9943cbf-39ec-480a-a2b6-9504ab3a6669", "eventTime": "2017-05-27T05:15:25Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e9613bb-bb4b-4405-b40b-91dcc6a34fe7", "record_id": "flaws_cloudtrail:0000364:7e9613bb-bb4b-4405-b40b-91dcc6a34fe7", "row_index": 364, "timestamp": "2017-05-27T05:15:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1019, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e9613bb-bb4b-4405-b40b-91dcc6a34fe7", "eventTime": "2017-05-27T05:15:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab1ee3df-7f98-4c9e-895b-aa0524828de7", "record_id": "flaws_cloudtrail:0000365:ab1ee3df-7f98-4c9e-895b-aa0524828de7", "row_index": 365, "timestamp": "2017-05-27T05:15:25Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab1ee3df-7f98-4c9e-895b-aa0524828de7", "eventTime": "2017-05-27T05:15:25Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd292017-912d-4d2f-bc9e-e47d82b5a16c", "record_id": "flaws_cloudtrail:0000366:dd292017-912d-4d2f-bc9e-e47d82b5a16c", "row_index": 366, "timestamp": "2017-05-27T05:15:25Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd292017-912d-4d2f-bc9e-e47d82b5a16c", "eventTime": "2017-05-27T05:15:25Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e8f90d2-cdf0-4497-8aa8-b0c9eb82758d", "record_id": "flaws_cloudtrail:0000367:1e8f90d2-cdf0-4497-8aa8-b0c9eb82758d", "row_index": 367, "timestamp": "2017-05-27T05:15:25Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1036, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e8f90d2-cdf0-4497-8aa8-b0c9eb82758d", "eventTime": "2017-05-27T05:15:25Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ed23e8e-b15a-40e3-abf9-8258f9ea3a27", "record_id": "flaws_cloudtrail:0000368:0ed23e8e-b15a-40e3-abf9-8258f9ea3a27", "row_index": 368, "timestamp": "2017-05-27T05:15:25Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ed23e8e-b15a-40e3-abf9-8258f9ea3a27", "eventTime": "2017-05-27T05:15:25Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "601979a59-7963-46f1-bce6-d9ce19a8382c", "record_id": "flaws_cloudtrail:0000369:601979a59-7963-46f1-bce6-d9ce19a8382c", "row_index": 369, "timestamp": "2017-05-27T05:15:25Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "601979a59-7963-46f1-bce6-d9ce19a8382c", "eventTime": "2017-05-27T05:15:25Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5788c3f-6eb4-443d-adec-1b82234e4ccf", "record_id": "flaws_cloudtrail:0000370:a5788c3f-6eb4-443d-adec-1b82234e4ccf", "row_index": 370, "timestamp": "2017-05-27T05:15:26Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5788c3f-6eb4-443d-adec-1b82234e4ccf", "eventTime": "2017-05-27T05:15:26Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eee1ec51-b2b8-4dac-ae11-40802c1e30ce", "record_id": "flaws_cloudtrail:0000371:eee1ec51-b2b8-4dac-ae11-40802c1e30ce", "row_index": 371, "timestamp": "2017-05-27T05:15:26Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1115, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eee1ec51-b2b8-4dac-ae11-40802c1e30ce", "eventTime": "2017-05-27T05:15:26Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c09ba803-8ae9-459c-9b49-121b2a8f4def", "record_id": "flaws_cloudtrail:0000372:c09ba803-8ae9-459c-9b49-121b2a8f4def", "row_index": 372, "timestamp": "2017-05-27T05:15:26Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c09ba803-8ae9-459c-9b49-121b2a8f4def", "eventTime": "2017-05-27T05:15:26Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0980f09-e0ca-4abf-8d33-86cefaefde05", "record_id": "flaws_cloudtrail:0000373:a0980f09-e0ca-4abf-8d33-86cefaefde05", "row_index": 373, "timestamp": "2017-05-27T05:15:26Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0980f09-e0ca-4abf-8d33-86cefaefde05", "eventTime": "2017-05-27T05:15:26Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68d3574c-b6da-40ee-bb0c-dfde6d3a32dc", "record_id": "flaws_cloudtrail:0000374:68d3574c-b6da-40ee-bb0c-dfde6d3a32dc", "row_index": 374, "timestamp": "2017-05-27T05:15:26Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68d3574c-b6da-40ee-bb0c-dfde6d3a32dc", "eventTime": "2017-05-27T05:15:26Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e026f52-ef58-49f0-80fe-a5d0bc15a52c", "record_id": "flaws_cloudtrail:0000375:7e026f52-ef58-49f0-80fe-a5d0bc15a52c", "row_index": 375, "timestamp": "2017-05-27T05:15:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1018, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e026f52-ef58-49f0-80fe-a5d0bc15a52c", "eventTime": "2017-05-27T05:15:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7505e568-9d5d-4ab2-8e28-910c27be0807", "record_id": "flaws_cloudtrail:0000376:7505e568-9d5d-4ab2-8e28-910c27be0807", "row_index": 376, "timestamp": "2017-05-27T05:15:26Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7505e568-9d5d-4ab2-8e28-910c27be0807", "eventTime": "2017-05-27T05:15:26Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79e6480d-a675-4d22-8d7f-c6962d521531", "record_id": "flaws_cloudtrail:0000377:79e6480d-a675-4d22-8d7f-c6962d521531", "row_index": 377, "timestamp": "2017-05-27T05:15:26Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79e6480d-a675-4d22-8d7f-c6962d521531", "eventTime": "2017-05-27T05:15:26Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b23d6fc0-84f5-4b8c-a148-da6277a1f035", "record_id": "flaws_cloudtrail:0000378:b23d6fc0-84f5-4b8c-a148-da6277a1f035", "row_index": 378, "timestamp": "2017-05-27T05:15:27Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b23d6fc0-84f5-4b8c-a148-da6277a1f035", "eventTime": "2017-05-27T05:15:27Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a2865d4-f104-4642-9d15-79eea489c5c9", "record_id": "flaws_cloudtrail:0000379:5a2865d4-f104-4642-9d15-79eea489c5c9", "row_index": 379, "timestamp": "2017-05-27T05:15:27Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a2865d4-f104-4642-9d15-79eea489c5c9", "eventTime": "2017-05-27T05:15:27Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc2c1cd5-09c6-4966-8963-a213dea8cf41", "record_id": "flaws_cloudtrail:0000380:bc2c1cd5-09c6-4966-8963-a213dea8cf41", "row_index": 380, "timestamp": "2017-05-27T05:15:27Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1040, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc2c1cd5-09c6-4966-8963-a213dea8cf41", "eventTime": "2017-05-27T05:15:27Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "984eaa0c-efa3-4c96-9a8b-1f6835f420be", "record_id": "flaws_cloudtrail:0000381:984eaa0c-efa3-4c96-9a8b-1f6835f420be", "row_index": 381, "timestamp": "2017-05-27T05:15:27Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "984eaa0c-efa3-4c96-9a8b-1f6835f420be", "eventTime": "2017-05-27T05:15:27Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b2a1c2c-224a-45c1-b1a9-f3e737df4f98", "record_id": "flaws_cloudtrail:0000382:9b2a1c2c-224a-45c1-b1a9-f3e737df4f98", "row_index": 382, "timestamp": "2017-05-27T05:15:27Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b2a1c2c-224a-45c1-b1a9-f3e737df4f98", "eventTime": "2017-05-27T05:15:27Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "917b15a0-4b9d-481a-9a63-352853836785", "record_id": "flaws_cloudtrail:0000383:917b15a0-4b9d-481a-9a63-352853836785", "row_index": 383, "timestamp": "2017-05-27T05:15:27Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "917b15a0-4b9d-481a-9a63-352853836785", "eventTime": "2017-05-27T05:15:27Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fa942798-efbd-4ec7-b261-0018ed3dba8e", "record_id": "flaws_cloudtrail:0000384:5fa942798-efbd-4ec7-b261-0018ed3dba8e", "row_index": 384, "timestamp": "2017-05-27T05:15:27Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1037, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fa942798-efbd-4ec7-b261-0018ed3dba8e", "eventTime": "2017-05-27T05:15:27Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd7993b2-51e6-4c58-b6c5-76bb54d8392e", "record_id": "flaws_cloudtrail:0000385:bd7993b2-51e6-4c58-b6c5-76bb54d8392e", "row_index": 385, "timestamp": "2017-05-27T05:15:27Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd7993b2-51e6-4c58-b6c5-76bb54d8392e", "eventTime": "2017-05-27T05:15:27Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95c78f7e-f8e6-4bdb-8e76-17908d8d1", "record_id": "flaws_cloudtrail:0000386:95c78f7e-f8e6-4bdb-8e76-17908d8d1", "row_index": 386, "timestamp": "2017-05-27T05:15:27Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95c78f7e-f8e6-4bdb-8e76-17908d8d1", "eventTime": "2017-05-27T05:15:27Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb40af13-4779-4e67-a95c-82c4b41686fe", "record_id": "flaws_cloudtrail:0000387:cb40af13-4779-4e67-a95c-82c4b41686fe", "row_index": 387, "timestamp": "2017-05-27T05:15:27Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb40af13-4779-4e67-a95c-82c4b41686fe", "eventTime": "2017-05-27T05:15:27Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "610f7f95-cf8d-4b65-9421-b877ac2befd9", "record_id": "flaws_cloudtrail:0000388:610f7f95-cf8d-4b65-9421-b877ac2befd9", "row_index": 388, "timestamp": "2017-05-27T05:15:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "610f7f95-cf8d-4b65-9421-b877ac2befd9", "eventTime": "2017-05-27T05:15:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a1335a6-d766-4198-b0bc-0ad05e9da09f", "record_id": "flaws_cloudtrail:0000389:7a1335a6-d766-4198-b0bc-0ad05e9da09f", "row_index": 389, "timestamp": "2017-05-27T05:15:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a1335a6-d766-4198-b0bc-0ad05e9da09f", "eventTime": "2017-05-27T05:15:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8927eecc-dfe2-4e2c-acef-bffd6bac438d", "record_id": "flaws_cloudtrail:0000390:8927eecc-dfe2-4e2c-acef-bffd6bac438d", "row_index": 390, "timestamp": "2017-05-27T05:15:28Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1036, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8927eecc-dfe2-4e2c-acef-bffd6bac438d", "eventTime": "2017-05-27T05:15:28Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79fee883-121f-419f-a12a-c6af61948ede", "record_id": "flaws_cloudtrail:0000391:79fee883-121f-419f-a12a-c6af61948ede", "row_index": 391, "timestamp": "2017-05-27T05:15:28Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79fee883-121f-419f-a12a-c6af61948ede", "eventTime": "2017-05-27T05:15:28Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d4668f1-28bf-4cf4-9ce6-dcd04b6a63ff", "record_id": "flaws_cloudtrail:0000392:0d4668f1-28bf-4cf4-9ce6-dcd04b6a63ff", "row_index": 392, "timestamp": "2017-05-27T05:15:28Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d4668f1-28bf-4cf4-9ce6-dcd04b6a63ff", "eventTime": "2017-05-27T05:15:28Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d1deb8b-8a21-43a3-8bc7-3f62c46cd03c", "record_id": "flaws_cloudtrail:0000393:2d1deb8b-8a21-43a3-8bc7-3f62c46cd03c", "row_index": 393, "timestamp": "2017-05-27T05:15:28Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d1deb8b-8a21-43a3-8bc7-3f62c46cd03c", "eventTime": "2017-05-27T05:15:28Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "587529-3934-4579-83bd-64c372eb46ba", "record_id": "flaws_cloudtrail:0000394:587529-3934-4579-83bd-64c372eb46ba", "row_index": 394, "timestamp": "2017-05-27T05:15:28Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1135, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "587529-3934-4579-83bd-64c372eb46ba", "eventTime": "2017-05-27T05:15:28Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4124c745-b25f-4a88-bbab-952a73854e4d", "record_id": "flaws_cloudtrail:0000395:4124c745-b25f-4a88-bbab-952a73854e4d", "row_index": 395, "timestamp": "2017-05-27T05:15:28Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4124c745-b25f-4a88-bbab-952a73854e4d", "eventTime": "2017-05-27T05:15:28Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07f71e49-add7-4780-89bf-245e60c99a64", "record_id": "flaws_cloudtrail:0000396:07f71e49-add7-4780-89bf-245e60c99a64", "row_index": 396, "timestamp": "2017-05-27T05:15:28Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07f71e49-add7-4780-89bf-245e60c99a64", "eventTime": "2017-05-27T05:15:28Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5276b94-ba70-4d5c-85ee-0ea7fb180428", "record_id": "flaws_cloudtrail:0000397:c5276b94-ba70-4d5c-85ee-0ea7fb180428", "row_index": 397, "timestamp": "2017-05-27T05:15:29Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5276b94-ba70-4d5c-85ee-0ea7fb180428", "eventTime": "2017-05-27T05:15:29Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "977f79cb-a973-4d13-9235-91d1e867fd00", "record_id": "flaws_cloudtrail:0000398:977f79cb-a973-4d13-9235-91d1e867fd00", "row_index": 398, "timestamp": "2017-05-27T05:15:29Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "977f79cb-a973-4d13-9235-91d1e867fd00", "eventTime": "2017-05-27T05:15:29Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "067c49ed-df82-48f3-b637-d62a70a9fbaf", "record_id": "flaws_cloudtrail:0000399:067c49ed-df82-48f3-b637-d62a70a9fbaf", "row_index": 399, "timestamp": "2017-05-27T05:15:29Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "067c49ed-df82-48f3-b637-d62a70a9fbaf", "eventTime": "2017-05-27T05:15:29Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d6ac485-7ae8-4351-ae84-33f871e20aa7", "record_id": "flaws_cloudtrail:0000400:0d6ac485-7ae8-4351-ae84-33f871e20aa7", "row_index": 400, "timestamp": "2017-05-27T05:15:29Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d6ac485-7ae8-4351-ae84-33f871e20aa7", "eventTime": "2017-05-27T05:15:29Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d2adc1e-50f6-44d3-9752-a9c14cca8a78", "record_id": "flaws_cloudtrail:0000401:5d2adc1e-50f6-44d3-9752-a9c14cca8a78", "row_index": 401, "timestamp": "2017-05-27T05:15:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d2adc1e-50f6-44d3-9752-a9c14cca8a78", "eventTime": "2017-05-27T05:15:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc54bbef-a0fe-40eb-86c8-be01dedfd111", "record_id": "flaws_cloudtrail:0000402:cc54bbef-a0fe-40eb-86c8-be01dedfd111", "row_index": 402, "timestamp": "2017-05-27T05:15:29Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1036, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc54bbef-a0fe-40eb-86c8-be01dedfd111", "eventTime": "2017-05-27T05:15:29Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8a17701-ff2d-4ad5-b9d4-6ff179e5d75f", "record_id": "flaws_cloudtrail:0000403:f8a17701-ff2d-4ad5-b9d4-6ff179e5d75f", "row_index": 403, "timestamp": "2017-05-27T05:15:29Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8a17701-ff2d-4ad5-b9d4-6ff179e5d75f", "eventTime": "2017-05-27T05:15:29Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e52f4de7-9c69-4324-957d-b45780572838", "record_id": "flaws_cloudtrail:0000404:e52f4de7-9c69-4324-957d-b45780572838", "row_index": 404, "timestamp": "2017-05-27T05:15:29Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1040, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e52f4de7-9c69-4324-957d-b45780572838", "eventTime": "2017-05-27T05:15:29Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9a69b66-b888-4253-b7cb-5678c3c1321b", "record_id": "flaws_cloudtrail:0000405:a9a69b66-b888-4253-b7cb-5678c3c1321b", "row_index": 405, "timestamp": "2017-05-27T05:15:30Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9a69b66-b888-4253-b7cb-5678c3c1321b", "eventTime": "2017-05-27T05:15:30Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f9408f8-d6cb-4843-9d52-89934a4bb4d5", "record_id": "flaws_cloudtrail:0000406:3f9408f8-d6cb-4843-9d52-89934a4bb4d5", "row_index": 406, "timestamp": "2017-05-27T05:15:30Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f9408f8-d6cb-4843-9d52-89934a4bb4d5", "eventTime": "2017-05-27T05:15:30Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c16264-0f0d-46a2-a154-612ef8f3d387", "record_id": "flaws_cloudtrail:0000407:4c16264-0f0d-46a2-a154-612ef8f3d387", "row_index": 407, "timestamp": "2017-05-27T05:15:30Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c16264-0f0d-46a2-a154-612ef8f3d387", "eventTime": "2017-05-27T05:15:30Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c094942-cb88-4bf3-915c-4a695784c5d4", "record_id": "flaws_cloudtrail:0000408:c094942-cb88-4bf3-915c-4a695784c5d4", "row_index": 408, "timestamp": "2017-05-27T05:15:30Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c094942-cb88-4bf3-915c-4a695784c5d4", "eventTime": "2017-05-27T05:15:30Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25fe5f1f-3245-474f-b2fa-803f78bc3bec", "record_id": "flaws_cloudtrail:0000409:25fe5f1f-3245-474f-b2fa-803f78bc3bec", "row_index": 409, "timestamp": "2017-05-27T05:15:30Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1034, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25fe5f1f-3245-474f-b2fa-803f78bc3bec", "eventTime": "2017-05-27T05:15:30Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e8dfe52-9e4e-494f-b165-aded58846", "record_id": "flaws_cloudtrail:0000410:4e8dfe52-9e4e-494f-b165-aded58846", "row_index": 410, "timestamp": "2017-05-27T05:15:30Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1134, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e8dfe52-9e4e-494f-b165-aded58846", "eventTime": "2017-05-27T05:15:30Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b66fb74-4a89-4868-8ba9-3d8312bff095", "record_id": "flaws_cloudtrail:0000411:9b66fb74-4a89-4868-8ba9-3d8312bff095", "row_index": 411, "timestamp": "2017-05-27T05:15:30Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1040, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b66fb74-4a89-4868-8ba9-3d8312bff095", "eventTime": "2017-05-27T05:15:30Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0b625e4-9b28-409d-a6ab-6fe5e0dddf78", "record_id": "flaws_cloudtrail:0000412:a0b625e4-9b28-409d-a6ab-6fe5e0dddf78", "row_index": 412, "timestamp": "2017-05-27T05:15:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1020, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0b625e4-9b28-409d-a6ab-6fe5e0dddf78", "eventTime": "2017-05-27T05:15:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "392a7a13-0809-4f6a-960c-ba8e56afe3f7", "record_id": "flaws_cloudtrail:0000413:392a7a13-0809-4f6a-960c-ba8e56afe3f7", "row_index": 413, "timestamp": "2017-05-27T05:25:10Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1480, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "392a7a13-0809-4f6a-960c-ba8e56afe3f7", "eventTime": "2017-05-27T05:25:10Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZVJQ97WD2FP4YTVC", "expiration": "May 27, 2017 11:28:14 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88602a47-b59f-4c55-b122-7e3dbf858863", "record_id": "flaws_cloudtrail:0000414:88602a47-b59f-4c55-b122-7e3dbf858863", "row_index": 414, "timestamp": "2017-05-27T05:25:17Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAA2GE6NPKD1V52QLO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.41.15.101", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 546, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88602a47-b59f-4c55-b122-7e3dbf858863", "eventTime": "2017-05-27T05:25:17Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.41.15.101", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAA2GE6NPKD1V52QLO", "userName": "SecurityMokey"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6000f321-0c74-4ea7-b763-c0284bee19f0", "record_id": "flaws_cloudtrail:0000415:6000f321-0c74-4ea7-b763-c0284bee19f0", "row_index": 415, "timestamp": "2017-05-27T05:26:29Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAA2GE6NPKD1V52QLO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.41.15.101", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 575, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6000f321-0c74-4ea7-b763-c0284bee19f0", "eventTime": "2017-05-27T05:26:29Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.41.15.101", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAA2GE6NPKD1V52QLO", "userName": "SecurityMokey"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "543c8cef-2ea4-48c6-88ff-14dce5265f04", "record_id": "flaws_cloudtrail:0000416:543c8cef-2ea4-48c6-88ff-14dce5265f04", "row_index": 416, "timestamp": "2017-05-27T05:28:34Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAA2GE6NPKD1V52QLO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.41.15.101", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 602, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "543c8cef-2ea4-48c6-88ff-14dce5265f04", "eventTime": "2017-05-27T05:28:34Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.41.15.101", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAA2GE6NPKD1V52QLO", "userName": "SecurityMokey"}, "requestParameters": {"userName": "SecurityMokey"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54c9ce69-9c08-4cb2-82ca-ccf5400948c2", "record_id": "flaws_cloudtrail:0000417:54c9ce69-9c08-4cb2-82ca-ccf5400948c2", "row_index": 417, "timestamp": "2017-05-27T05:29:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54c9ce69-9c08-4cb2-82ca-ccf5400948c2", "eventTime": "2017-05-27T05:29:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6Z24J3XCG6DBQ15E", "expiration": "May 27, 2017 6:29:38 AM", "sessionToken": "FQoDYXdzECcaDDsZuhA8xqRCyIl5uiLMAY0vi4ON40THHftV/Q1KyPlyYH4JhoJC7lJOULSNVK9N5zZ7lXdD4fBLAd1JUiaQlLRUIOfKrHi52bMw/+fMRQubwgB5GCBjEPU3H1bcy/OwSvZCMExMbuoMIx0yLIwHOm6RAL9HrQKmD99wLfd3eBUKrilzUy0Q2pDWTHXX02KkJ2N9d5di+9foeU/afdSAS/NlDraVh7GqgL4Lm5lWVyV/GWbWBkP/sVwIiXzdyMUh19tjrx69tRh8cyAqOv9waBu8yBSmaPW8NIKHZijCnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6112fc45-39ed-4b26-a48d-53c454138e38", "record_id": "flaws_cloudtrail:0000418:6112fc45-39ed-4b26-a48d-53c454138e38", "row_index": 418, "timestamp": "2017-05-27T05:29:38Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6Z24J3XCG6DBQ15E", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6112fc45-39ed-4b26-a48d-53c454138e38", "eventTime": "2017-05-27T05:29:38Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6Z24J3XCG6DBQ15E", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b56cbcd4-d5d4-4264-954f-16af7a2912fa", "record_id": "flaws_cloudtrail:0000419:b56cbcd4-d5d4-4264-954f-16af7a2912fa", "row_index": 419, "timestamp": "2017-05-27T05:29:38Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6Z24J3XCG6DBQ15E", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b56cbcd4-d5d4-4264-954f-16af7a2912fa", "eventTime": "2017-05-27T05:29:38Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6Z24J3XCG6DBQ15E", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fb6e0f6-ddfa-4ea8-88bc-c41e51c366ba", "record_id": "flaws_cloudtrail:0000420:4fb6e0f6-ddfa-4ea8-88bc-c41e51c366ba", "row_index": 420, "timestamp": "2017-05-27T05:29:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fb6e0f6-ddfa-4ea8-88bc-c41e51c366ba", "eventTime": "2017-05-27T05:29:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA680YH3M825DLUWKJ", "expiration": "May 27, 2017 6:29:39 AM", "sessionToken": "FQoDYXdzECcaDNxfdRU6f+v8TjK7diLMAYofTIYtfwSwY2x4uVjQqMrJI0mfMu50mqf2rDG5juFDfDOU5bNeBQ0vaFhvJJpUZy/kBs+xE3DgjSFzfLyMtrqnTQ8ZsEycl8OX6QC2gvyLbsddRtPd1UwUGHiwzUTcSyNXWab2C1ZhyWtT/XnqZaQqMOYBhSEkgzIVptXCzaUYprODpPs3upW7liadUafzoH1jmOwAmnVtS5QE8xVoedfBPDFlA94BzDDBvhQfnw7pUf5a+T7AFLu7RF1UC1Lb0zdS1OYSElQhgDfGISjDnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d1e4930-290f-4264-b036-4c628ed05acf", "record_id": "flaws_cloudtrail:0000421:2d1e4930-290f-4264-b036-4c628ed05acf", "row_index": 421, "timestamp": "2017-05-27T05:29:39Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA680YH3M825DLUWKJ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d1e4930-290f-4264-b036-4c628ed05acf", "eventTime": "2017-05-27T05:29:39Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA680YH3M825DLUWKJ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d5c61a0-d73c-4bdd-8d5a-db2627de6a59", "record_id": "flaws_cloudtrail:0000422:9d5c61a0-d73c-4bdd-8d5a-db2627de6a59", "row_index": 422, "timestamp": "2017-05-27T05:29:39Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA680YH3M825DLUWKJ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d5c61a0-d73c-4bdd-8d5a-db2627de6a59", "eventTime": "2017-05-27T05:29:39Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA680YH3M825DLUWKJ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "659d265b-a468-48ff-a8d7-b56ef4d5c45f", "record_id": "flaws_cloudtrail:0000423:659d265b-a468-48ff-a8d7-b56ef4d5c45f", "row_index": 423, "timestamp": "2017-05-27T05:29:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "659d265b-a468-48ff-a8d7-b56ef4d5c45f", "eventTime": "2017-05-27T05:29:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAO3M4MCK72Z1QRADX", "expiration": "May 27, 2017 6:29:39 AM", "sessionToken": "FQoDYXdzECcaDN/ym5alA+waPdBV7yLMAWqEn1YZB4TaH9PBKgx52/fb631I0+if0t/Tcr3E5AK8CS5qtEvcQyf3L+qDS3813pQxA0f9MzYmbDWIZNnsnAJNhEem1OHom7K9sPMRVJ0ireyX8m10Rn4hTRWoEmp2NaXAs5YMkLR4vialYpskEa9ALb48et9+lUDOPNPT4U+NI3tv4BuZMMsVN7O6HIt2s0GlmT1hIfugIYPHtHpK6VsTUqZp47+FSSO1mYrY3Wd7SP37wiDmep69I+v+7uZbZ8JtFihL5GyQcz7xVijDnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18888b4-e539-44e3-b2dd-945aff7a42d5", "record_id": "flaws_cloudtrail:0000424:18888b4-e539-44e3-b2dd-945aff7a42d5", "row_index": 424, "timestamp": "2017-05-27T05:29:40Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAO3M4MCK72Z1QRADX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18888b4-e539-44e3-b2dd-945aff7a42d5", "eventTime": "2017-05-27T05:29:40Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAO3M4MCK72Z1QRADX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "625ea2c6-5a92-4545-a56c-3832c2d2d542", "record_id": "flaws_cloudtrail:0000425:625ea2c6-5a92-4545-a56c-3832c2d2d542", "row_index": 425, "timestamp": "2017-05-27T05:29:41Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAO3M4MCK72Z1QRADX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "625ea2c6-5a92-4545-a56c-3832c2d2d542", "eventTime": "2017-05-27T05:29:41Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAO3M4MCK72Z1QRADX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d0e37ba-a959-4de2-86d7-127c6a04e28b", "record_id": "flaws_cloudtrail:0000426:8d0e37ba-a959-4de2-86d7-127c6a04e28b", "row_index": 426, "timestamp": "2017-05-27T05:29:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d0e37ba-a959-4de2-86d7-127c6a04e28b", "eventTime": "2017-05-27T05:29:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8O5EIX7J94A5YCRL", "expiration": "May 27, 2017 6:29:41 AM", "sessionToken": "FQoDYXdzECcaDEzzFcyaTHIdjuEariLMAYsgRCxaooxO0YYWVGHACS+m4rbGVkP3G/eLBbdRHITb4V6Fd0nV7Qp8VHvg+3Q6mRYEMD9vXUaTf4vcuHSUqHdrH4cIfFLafa3PzgXNQ/S/Hg/3Cdr6b4wv2m0SMYtu1XMdWr63e2d3Js8hQ+S16gqP/nz5h3MazPuStPB0wkcZj9M8rhpGiyHtynU5HbH4UIvt+5+hQERFA/FKV6w+xpA0lkj2X0NqyZl3qcmSO7WGCDxUmzVHCGXZFmqS1spSll35wKy5q25EVGOINijFnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bca29c94-3de4-4065-ace5-ca234be9621e", "record_id": "flaws_cloudtrail:0000427:bca29c94-3de4-4065-ace5-ca234be9621e", "row_index": 427, "timestamp": "2017-05-27T05:29:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8O5EIX7J94A5YCRL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bca29c94-3de4-4065-ace5-ca234be9621e", "eventTime": "2017-05-27T05:29:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8O5EIX7J94A5YCRL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0e2ab16-7074-4390-b79b-d73224233b39", "record_id": "flaws_cloudtrail:0000428:a0e2ab16-7074-4390-b79b-d73224233b39", "row_index": 428, "timestamp": "2017-05-27T05:29:42Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8O5EIX7J94A5YCRL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0e2ab16-7074-4390-b79b-d73224233b39", "eventTime": "2017-05-27T05:29:42Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8O5EIX7J94A5YCRL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "320f94c7-6f32-4c16-9b34-ca8f720c618d", "record_id": "flaws_cloudtrail:0000429:320f94c7-6f32-4c16-9b34-ca8f720c618d", "row_index": 429, "timestamp": "2017-05-27T05:29:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "320f94c7-6f32-4c16-9b34-ca8f720c618d", "eventTime": "2017-05-27T05:29:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKRYNODHIPQWRGVO9", "expiration": "May 27, 2017 6:29:43 AM", "sessionToken": "FQoDYXdzECcaDOXVj2+Gm+NFCFgCuSLMAa+ck5XjbZ3L2YgBDRemdxiupQHLFuCui+WBKkWrdF8+WkPY1i2ONAW23tkrDlE+KxYlkgSdavM344glAOKUoDkVgS+a+onvBHA0K66CijS8Cge40LzpK4sG9vN+/gik97Z+uQfcUyPIaNLLm1P9RW3R1Gy/XbQPtv293B9S6OeY/V0TQtD+lEXLGWsXz7YxL7YYgfWwstiwB9oqNIm8bfK0iW1ItNcxRozdlqxag4JXB4FMWFoHWew/yM0rEaAiaKQs4pSWBOYrWO4TOCjHnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f888100cb-6cc7-4110-8f48-7258e6de7658", "record_id": "flaws_cloudtrail:0000430:f888100cb-6cc7-4110-8f48-7258e6de7658", "row_index": 430, "timestamp": "2017-05-27T05:29:44Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKRYNODHIPQWRGVO9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1043, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f888100cb-6cc7-4110-8f48-7258e6de7658", "eventTime": "2017-05-27T05:29:44Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKRYNODHIPQWRGVO9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "088ccf32-2319-4653-a2cd-30e7863bff0b", "record_id": "flaws_cloudtrail:0000431:088ccf32-2319-4653-a2cd-30e7863bff0b", "row_index": 431, "timestamp": "2017-05-27T05:29:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKRYNODHIPQWRGVO9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "088ccf32-2319-4653-a2cd-30e7863bff0b", "eventTime": "2017-05-27T05:29:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKRYNODHIPQWRGVO9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03f13bae-1f49-4c13-9866-5fd6b56b3227", "record_id": "flaws_cloudtrail:0000432:03f13bae-1f49-4c13-9866-5fd6b56b3227", "row_index": 432, "timestamp": "2017-05-27T05:29:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03f13bae-1f49-4c13-9866-5fd6b56b3227", "eventTime": "2017-05-27T05:29:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIACC6BIIMCHYJMBO5D", "expiration": "May 27, 2017 6:29:44 AM", "sessionToken": "FQoDYXdzECcaDLdZ2q3skAb0BiUN3iLMAVzkVmxdHyHQy+CqwK++gfe/dYowYkn+6khNbpnv94eYNCh1RP7RAQiq4w/gesYZyu6gKz69RCJrJOGFsjZebQ1FiQGhWIuOolMIerU8tpbkvgIJT/ruUL1VjPIw5TdDm94iUPeKBdYEppg/IiCYfAnz3WYexLAiItK84YkmUnudX2UVmYBSTWyRzQwlerTK0wJaGhumKyazQyrO+7KpUuXC/EdRlGGGK+b7XadOYEFwHwM1OXUcBI0Gkj5WLBei0ojX0Mp/ykFi9lWbOijInaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ef28fe8-03d3-4bf5-925d-fa7bc0fe53c2", "record_id": "flaws_cloudtrail:0000433:2ef28fe8-03d3-4bf5-925d-fa7bc0fe53c2", "row_index": 433, "timestamp": "2017-05-27T05:29:45Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACC6BIIMCHYJMBO5D", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ef28fe8-03d3-4bf5-925d-fa7bc0fe53c2", "eventTime": "2017-05-27T05:29:45Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACC6BIIMCHYJMBO5D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71b592bc-b867-4ce9-a60a-598f022035bc", "record_id": "flaws_cloudtrail:0000434:71b592bc-b867-4ce9-a60a-598f022035bc", "row_index": 434, "timestamp": "2017-05-27T05:29:46Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACC6BIIMCHYJMBO5D", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71b592bc-b867-4ce9-a60a-598f022035bc", "eventTime": "2017-05-27T05:29:46Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACC6BIIMCHYJMBO5D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8aab9a1-dd7e-4d82-b23e-fa569512b32b", "record_id": "flaws_cloudtrail:0000435:a8aab9a1-dd7e-4d82-b23e-fa569512b32b", "row_index": 435, "timestamp": "2017-05-27T05:29:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8aab9a1-dd7e-4d82-b23e-fa569512b32b", "eventTime": "2017-05-27T05:29:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9VQQCV6WI4L746IH", "expiration": "May 27, 2017 6:29:46 AM", "sessionToken": "FQoDYXdzECcaDI04Sfv/nEa4gJ51tSLMAeyaVYbzfKKIlGMHDHo2XM8rkCCZljnHs442pEuLFdlFgxBaxlUnTYhkPdLv85XzSzwoqy/POPSrq8L87ypIsp8uOF50Y/abJQpKLRfodVMniM2+Xj1QvJaIiVfOmHqrGDhsIN54X3FaJcjDMzigKrTjqSxwIIgD80XPGu/pU637MuJ5R2gnOA2k2yWo9OcPH3iVAA2AxnIPLQDGCsfGc5FCAfc6Gj88lQwU+OGKgYvX50kSYrSWa4QqC/ay9YFnoYP1hBbweyjJJzbwwCjKnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df98dec6-ab49-4755-b5a8-9a622ffe7de3", "record_id": "flaws_cloudtrail:0000436:df98dec6-ab49-4755-b5a8-9a622ffe7de3", "row_index": 436, "timestamp": "2017-05-27T05:29:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df98dec6-ab49-4755-b5a8-9a622ffe7de3", "eventTime": "2017-05-27T05:29:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAR82GWY1XPNI1FEWE", "expiration": "May 27, 2017 6:29:47 AM", "sessionToken": "FQoDYXdzECcaDL6iDSofwczjDm0UQiLMAW463NGw+s73OaYJisN3uvq8HyV4DJYryDIOvE2Uc/zQp9UD6V6ztJIBNxvJRx7MExMTL3cymNGIGISKfQMTq1okIQUG6oYctpdz74Kspe3r02DBCo0shTVN1gPXD60W75r5Au1f1Y3mD+sy7h3j522ZuSu6nnNmJ0ZXkNED03Olwn2Eufu+4sP5g0Brq4J3JlUC0wwDnMDTbFj3oBtBcTJK2pZ/0J/Fpw0VkzZvmptnxXB/YjLu4e0OtVOL1hEfBxBHUE6l7lD3tE7RZijLnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85cb0374-7b92-4bec-90aa-f0592c4ad437", "record_id": "flaws_cloudtrail:0000437:85cb0374-7b92-4bec-90aa-f0592c4ad437", "row_index": 437, "timestamp": "2017-05-27T05:29:47Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9VQQCV6WI4L746IH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85cb0374-7b92-4bec-90aa-f0592c4ad437", "eventTime": "2017-05-27T05:29:47Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9VQQCV6WI4L746IH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df5a8bdb-f2f0-405d-981b-b8cff7a114d3", "record_id": "flaws_cloudtrail:0000438:df5a8bdb-f2f0-405d-981b-b8cff7a114d3", "row_index": 438, "timestamp": "2017-05-27T05:29:47Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9VQQCV6WI4L746IH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df5a8bdb-f2f0-405d-981b-b8cff7a114d3", "eventTime": "2017-05-27T05:29:47Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9VQQCV6WI4L746IH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca63c379-e000-4a49-9f54-e6ca296568", "record_id": "flaws_cloudtrail:0000439:ca63c379-e000-4a49-9f54-e6ca296568", "row_index": 439, "timestamp": "2017-05-27T05:29:48Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAR82GWY1XPNI1FEWE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1045, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca63c379-e000-4a49-9f54-e6ca296568", "eventTime": "2017-05-27T05:29:48Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAR82GWY1XPNI1FEWE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fed78b17-369d-4216-be35-28f27d016d86", "record_id": "flaws_cloudtrail:0000440:fed78b17-369d-4216-be35-28f27d016d86", "row_index": 440, "timestamp": "2017-05-27T05:29:48Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAR82GWY1XPNI1FEWE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fed78b17-369d-4216-be35-28f27d016d86", "eventTime": "2017-05-27T05:29:48Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAR82GWY1XPNI1FEWE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b419b31-68db-4dc7-8750-11088b470a7", "record_id": "flaws_cloudtrail:0000441:3b419b31-68db-4dc7-8750-11088b470a7", "row_index": 441, "timestamp": "2017-05-27T05:29:49Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1X5E81PYC2PGHYME", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1044, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b419b31-68db-4dc7-8750-11088b470a7", "eventTime": "2017-05-27T05:29:49Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1X5E81PYC2PGHYME", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79f14f6e-e8dc-48e7-873e-d15bd3e4f0b5", "record_id": "flaws_cloudtrail:0000442:79f14f6e-e8dc-48e7-873e-d15bd3e4f0b5", "row_index": 442, "timestamp": "2017-05-27T05:29:49Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1X5E81PYC2PGHYME", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79f14f6e-e8dc-48e7-873e-d15bd3e4f0b5", "eventTime": "2017-05-27T05:29:49Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1X5E81PYC2PGHYME", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8353b12d-20f2-47a2-b278-4acc15bc5c85", "record_id": "flaws_cloudtrail:0000443:8353b12d-20f2-47a2-b278-4acc15bc5c85", "row_index": 443, "timestamp": "2017-05-27T05:29:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8353b12d-20f2-47a2-b278-4acc15bc5c85", "eventTime": "2017-05-27T05:29:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1X5E81PYC2PGHYME", "expiration": "May 27, 2017 6:29:49 AM", "sessionToken": "FQoDYXdzECcaDNCkzubO9tgnhSoNEiLMARbm3SVxKZgsofqtMzRhq0QQ8g+7XnYUnt7H/OO38CffJ0uAsFmr6XXwRMOGPsQ+rJWWeaDpw+1pAxA2Wy/ylOa6HWqj2KvXzIJPJf2HxdU+/DfTg4PPEj6lnrIx89ZO3kkjyy/SVdBwaLo0hX1SWKVOVBcRQyicmh/RwnBO81GK+qjGavCb3fPJX7FdDKcimoo/Av3BKrVjmnUnHpukXQDBR1zblQuGTORodz4BvSC6106jFs4VgoYCDmEanhPmesOZ3PVJqXGkoljZhCjNnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "462df6d0-6de3-43b7-8c42-bfd74cacfa41", "record_id": "flaws_cloudtrail:0000444:462df6d0-6de3-43b7-8c42-bfd74cacfa41", "row_index": 444, "timestamp": "2017-05-27T05:29:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "462df6d0-6de3-43b7-8c42-bfd74cacfa41", "eventTime": "2017-05-27T05:29:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA29V8HT3ARWQS0R9J", "expiration": "May 27, 2017 6:29:50 AM", "sessionToken": "FQoDYXdzECcaDIJ6/pplRqBKwIWS6SLMAfvsf0o+uWqDkEOXrcqhSdcODOSTvxhSoKHOVZVcfHeJebhxYafIaJ7eI6q9AgmFdg5Y9yW3AxRaa5rXnt1hR9YuYvS9hdflp9mDRtjfiibr44Z9oow8TTvdxO7UAFGYsia4jDL4ZNsITe2RUgRNy2CSHo4k+1M5BIMuQBSItlMUeD+ZGc3Ohz6kzww1OEQEs84fD4B7n+66j5l/6OGdXkVOLe6/x614SWo5Ed59Wx8clp3/Y6xjxvF/kG9d5XTdc0KIycyZo8tH8zgWQijOnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f81c7b7c-5cb4-4233-8258-c0f6bd7aeac8", "record_id": "flaws_cloudtrail:0000445:f81c7b7c-5cb4-4233-8258-c0f6bd7aeac8", "row_index": 445, "timestamp": "2017-05-27T05:29:51Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f81c7b7c-5cb4-4233-8258-c0f6bd7aeac8", "eventTime": "2017-05-27T05:29:51Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIANVAML9L7K5TAGALD", "expiration": "May 27, 2017 6:29:51 AM", "sessionToken": "FQoDYXdzECcaDIQE6LfT6bb+wOh7ECLMAb603WAYW2rKhSlWWNG55WNLDdOKD2RNrdBNcJKpn9hWnEEPHtqW0VTViw3eNC8j2g8nli2NQejkAS7rInce80N5w4/B6bzLcEstZhgqmd6UbAkhIYRWxWXEMk/04BB66E5xyQURNNEOA156Ehxn4qvPJk5uehzQF0t675vOh0tUpabvNVfQgakmAXe7xMUG1GBo/zkeTVDmM6K4IlM0b/3W3TIlnvf1LHvtLLrXy+6Q59/98N0DPkZdTH/ghYAQ0PL99pYIBmKK9QfVuCjPnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2db1802-f01d-4f01-bf6c-d851826fe145", "record_id": "flaws_cloudtrail:0000446:a2db1802-f01d-4f01-bf6c-d851826fe145", "row_index": 446, "timestamp": "2017-05-27T05:29:51Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIANVAML9L7K5TAGALD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2db1802-f01d-4f01-bf6c-d851826fe145", "eventTime": "2017-05-27T05:29:51Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIANVAML9L7K5TAGALD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d5d64f9-d556-4e97-88f2-a5484c05244", "record_id": "flaws_cloudtrail:0000447:2d5d64f9-d556-4e97-88f2-a5484c05244", "row_index": 447, "timestamp": "2017-05-27T05:29:51Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIANVAML9L7K5TAGALD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d5d64f9-d556-4e97-88f2-a5484c05244", "eventTime": "2017-05-27T05:29:51Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIANVAML9L7K5TAGALD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65bff1c2-0002-4ef9-a48c-edce6bdbdcab", "record_id": "flaws_cloudtrail:0000448:65bff1c2-0002-4ef9-a48c-edce6bdbdcab", "row_index": 448, "timestamp": "2017-05-27T05:29:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65bff1c2-0002-4ef9-a48c-edce6bdbdcab", "eventTime": "2017-05-27T05:29:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPLBCPQZOL64FMZ04", "expiration": "May 27, 2017 6:29:52 AM", "sessionToken": "FQoDYXdzECcaDD7X03FN7zuquT93ISLMARwJMAqbjOD8eAMmKnpP/EqlgUGY+uoQS1kWTV6OtcVEqCghjF2S57wmYmSJ+EPoTIqTOo2qFuU4SQsszpr+lB0Q8oODcH1zAbvxYPxOVXZxM2H2OjnP/k+Mad8KQZTHCuq4GxYcHaFNYbFW5ecOas5Xkcc3cU0QEGqnxwqenX82TRVIa9UC49sIuCE1CZh7n2wqvvWgGNFNLOTPTmVsvtDwa7/hYszJ+mcnnm0FZJMeo2wDoLYKoeuOhQKEzKTvdLaNq5Y8uY+/FsOeCCjQnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5820ea08-7456-43af-a56f-19a5d9aae927", "record_id": "flaws_cloudtrail:0000449:5820ea08-7456-43af-a56f-19a5d9aae927", "row_index": 449, "timestamp": "2017-05-27T05:29:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5820ea08-7456-43af-a56f-19a5d9aae927", "eventTime": "2017-05-27T05:29:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGKC4E0L761OCOE61", "expiration": "May 27, 2017 6:29:53 AM", "sessionToken": "FQoDYXdzECcaDIQVEu0Lvf4qm1h0syLMAaB3d24YgfQ56mDdER3whlLTflOqVSw0m53lMdWujbZG5sN2bE2Rsp2ex3sEZ5Vxy9SoL4C6X4hEgAbWlEYgZAd/pNfpihqZJYM2qUEPAxaeqzhCB3EFsTYcQ+qLjRKLLmkn7+Jq/pn+/T/T7X6niEX1tcmBLajrEI5In+OtMONAV34PnN7w60sMOhYdVg4nxMWKVbB5jKrbnXuhPyWV3Wns46kjX3UWbyPIfPGidU7pWbVFpVdIjZz6zEWz0r1JdCxRN6yngNDR3VLUzSjRnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e862629b1-4e49-45a5-b140-a491807dee14d", "record_id": "flaws_cloudtrail:0000450:e862629b1-4e49-45a5-b140-a491807dee14d", "row_index": 450, "timestamp": "2017-05-27T05:29:54Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAGKC4E0L761OCOE61", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1045, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e862629b1-4e49-45a5-b140-a491807dee14d", "eventTime": "2017-05-27T05:29:54Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAGKC4E0L761OCOE61", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b134af0-0be6-40fd-be80-2987c218f0c1", "record_id": "flaws_cloudtrail:0000451:3b134af0-0be6-40fd-be80-2987c218f0c1", "row_index": 451, "timestamp": "2017-05-27T05:29:54Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAGKC4E0L761OCOE61", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b134af0-0be6-40fd-be80-2987c218f0c1", "eventTime": "2017-05-27T05:29:54Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAGKC4E0L761OCOE61", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a2da484-4422-4191-b57b-6b7c8089673f", "record_id": "flaws_cloudtrail:0000452:6a2da484-4422-4191-b57b-6b7c8089673f", "row_index": 452, "timestamp": "2017-05-27T05:29:55Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a2da484-4422-4191-b57b-6b7c8089673f", "eventTime": "2017-05-27T05:29:55Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFTVDAE5BOON1FT7P", "expiration": "May 27, 2017 6:29:55 AM", "sessionToken": "FQoDYXdzECcaDFfh5e/xZ1YW3GHyVyLMATaKB4lV8sZkUatUdJvI/C26UYG4gDaIwJheuVqYTW1t0s+EvA7cFkWob93lZrW9/6RSD92y/jrlYeLES+soUXAS8FLyyM2mss8vTlHUXIHks6JD/UVZ76MqSecgA3UW1T/9ZdrCUFjfuxau1twN8T54Qn5JrFcOUwPIKeN/IF2xASfzekr9hwWj/qQonczTcy5onNgWegXqGWur/S3GrKaMC4OVANejtVW74XK/hsNE85NwdTAiUdxqrBOMebjCNAsol9eLWe2ygsxu1CjTnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18e1e742-9b71-499b-ba44-08ab7a69f4f8", "record_id": "flaws_cloudtrail:0000453:18e1e742-9b71-499b-ba44-08ab7a69f4f8", "row_index": 453, "timestamp": "2017-05-27T05:29:56Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFTVDAE5BOON1FT7P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1045, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18e1e742-9b71-499b-ba44-08ab7a69f4f8", "eventTime": "2017-05-27T05:29:56Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFTVDAE5BOON1FT7P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:55Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10364b8-e610-47c4-be60-67db6dd5633e", "record_id": "flaws_cloudtrail:0000454:10364b8-e610-47c4-be60-67db6dd5633e", "row_index": 454, "timestamp": "2017-05-27T05:29:56Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFTVDAE5BOON1FT7P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10364b8-e610-47c4-be60-67db6dd5633e", "eventTime": "2017-05-27T05:29:56Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFTVDAE5BOON1FT7P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:55Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fde74fd-a134-4fca-ab02-33d83afee366", "record_id": "flaws_cloudtrail:0000455:7fde74fd-a134-4fca-ab02-33d83afee366", "row_index": 455, "timestamp": "2017-05-27T05:29:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fde74fd-a134-4fca-ab02-33d83afee366", "eventTime": "2017-05-27T05:29:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAHIUGUFB2KFVIBBD", "expiration": "May 27, 2017 6:29:56 AM", "sessionToken": "FQoDYXdzECcaDAnD2dXsfZI6NOCjQiLMAXu1UGDR+xp+pPGXEob/hfgHr7+QrtivuS1UNF2yPkH6iSb6qCERuA2dfF70zpIazlfl8gpvroj/oszhRWuFL3r+/UgR0EiZzNbvmzZzsKF/vq/PxZ+eQrEqdAva22KdNr1d4zNe2IJpWs//HKR7y+dTQzG/HR3TdT5gFroktAKhAKWF5iT2u0RdBoJQqxbEsBn+/fPzAFLl+aH3ERAXsQ+BjVJXOxmYblw4YT66IJzxc5AlC8nF+grfFKkK0okwqwXc/wC3jx8B8IophCjUnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c431ff4-1275-4415-a3b4-18c889172", "record_id": "flaws_cloudtrail:0000456:1c431ff4-1275-4415-a3b4-18c889172", "row_index": 456, "timestamp": "2017-05-27T05:29:57Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAAHIUGUFB2KFVIBBD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c431ff4-1275-4415-a3b4-18c889172", "eventTime": "2017-05-27T05:29:57Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAAHIUGUFB2KFVIBBD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e3bbcf1-8f39-4b41-8498-0310fca41797", "record_id": "flaws_cloudtrail:0000457:7e3bbcf1-8f39-4b41-8498-0310fca41797", "row_index": 457, "timestamp": "2017-05-27T05:29:57Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAAHIUGUFB2KFVIBBD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e3bbcf1-8f39-4b41-8498-0310fca41797", "eventTime": "2017-05-27T05:29:57Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAAHIUGUFB2KFVIBBD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0294cc6a-0988-4344-a848-c3221d9fc7da", "record_id": "flaws_cloudtrail:0000458:0294cc6a-0988-4344-a848-c3221d9fc7da", "row_index": 458, "timestamp": "2017-05-27T05:29:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0294cc6a-0988-4344-a848-c3221d9fc7da", "eventTime": "2017-05-27T05:29:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQ9EIAD6LRQ63LDZ5", "expiration": "May 27, 2017 6:29:57 AM", "sessionToken": "FQoDYXdzECcaDK5+0aNvkLEbBvZGXSLMAU1bHcK201Nckn8jHz3NZ6RD1R4YAiJjMkujzL7tXTL1r+IIQmIMv0BT9Aj6NxgSbT65sW271t7/FA4ZHPxB5a5+r5EimgwgrO0OitPRDd22xKJnFtdCdrK25yal1vJGfKtjZcsGBJwL5tX8eAxkMTV2h1CppqoS+aWPw6/YPSwnjkxk5/q+mWYvTeTGoJ3UYIv8l5t846pL9n4p3BXDJRPNkjA8D6ItGs38oTTz5sFG5u6vubZSNdCz37vQfmGPUfu5k2ejNGUC+e5/XCjVnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5435d19-24a2-4564-a639-2257b1726a78", "record_id": "flaws_cloudtrail:0000459:c5435d19-24a2-4564-a639-2257b1726a78", "row_index": 459, "timestamp": "2017-05-27T05:29:58Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQ9EIAD6LRQ63LDZ5", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5435d19-24a2-4564-a639-2257b1726a78", "eventTime": "2017-05-27T05:29:58Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQ9EIAD6LRQ63LDZ5", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d11981-a77f-440d-adf2-c557b83122f", "record_id": "flaws_cloudtrail:0000460:7d11981-a77f-440d-adf2-c557b83122f", "row_index": 460, "timestamp": "2017-05-27T05:29:58Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQ9EIAD6LRQ63LDZ5", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d11981-a77f-440d-adf2-c557b83122f", "eventTime": "2017-05-27T05:29:58Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQ9EIAD6LRQ63LDZ5", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1b93633-c440-41bd-9fad-57c5cf533199", "record_id": "flaws_cloudtrail:0000461:a1b93633-c440-41bd-9fad-57c5cf533199", "row_index": 461, "timestamp": "2017-05-27T05:29:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1b93633-c440-41bd-9fad-57c5cf533199", "eventTime": "2017-05-27T05:29:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKDRHERCNWZULP6NA", "expiration": "May 27, 2017 6:29:59 AM", "sessionToken": "FQoDYXdzECcaDL2MSwDS7uhe75xfRSLMARPj2y1+pqUjYtFOs73yGCFGAG7eJiKvVmMW/esC289cNZPH/p+quJ/92MqtHOeSZsAcNsJzKOWOuu9Z8IGJKhuvXlb5h2gA5yUVw///ipQKnsyHolGpZrca+RfFM07clXveFtALqSLT0JKe1H0iXJOsB80iuobegAATeIirFB36DNey6nD6PzwcKKrdhyjmuKc0sPEEEkRjFg6ajaRZPGIzyCA0M5j12ZGU9dO+xi1Wo28pW287HEZFNOQXbtCJ+mr78L/wgzvilpdE8SjXnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db547eb0-a2cb-493a-bd71-b390e4aae870", "record_id": "flaws_cloudtrail:0000462:db547eb0-a2cb-493a-bd71-b390e4aae870", "row_index": 462, "timestamp": "2017-05-27T05:29:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db547eb0-a2cb-493a-bd71-b390e4aae870", "eventTime": "2017-05-27T05:29:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIANUJHU66QF6Y0LRAH", "expiration": "May 27, 2017 6:29:59 AM", "sessionToken": "FQoDYXdzECcaDF6h+mQjkd6ntqbYBCLMAcdN885UikfY5js4KKbJ+T3z6cStnWzBIooFi8hVAgxzD/5XACt61xqOAWCd7firkGrxVywuwaaxceSSoeP+vDB3OTI+/E2JGg0VX2Jy2wDTswQtCW3YDNYN9VXTrcBxAA9RqfAhP5KPfYz1rHiYH7cdv9YJ1PaGjIG0wkn8hrNtYAbb5TPnxafnoSgYqfk/bE0K4NS8VRffKuPMHqTXZP6GHifVq3yRU0wEzLC08H/ZHxnp/BbShrrpJ5it+GRryDbczOCChWrlOPjElSjXnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1eb5818-197f-45c3-808a-a2ab92fc9764", "record_id": "flaws_cloudtrail:0000463:c1eb5818-197f-45c3-808a-a2ab92fc9764", "row_index": 463, "timestamp": "2017-05-27T05:29:59Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIANUJHU66QF6Y0LRAH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 967, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1eb5818-197f-45c3-808a-a2ab92fc9764", "eventTime": "2017-05-27T05:29:59Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIANUJHU66QF6Y0LRAH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:59Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3830fd4f-fa1c-4a07-a494-0bb7a89f74c2", "record_id": "flaws_cloudtrail:0000464:3830fd4f-fa1c-4a07-a494-0bb7a89f74c2", "row_index": 464, "timestamp": "2017-05-27T05:30:01Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKDRHERCNWZULP6NA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3830fd4f-fa1c-4a07-a494-0bb7a89f74c2", "eventTime": "2017-05-27T05:30:01Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKDRHERCNWZULP6NA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:29:59Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd76c62e-1c27-4500-a4b4-25bcef023cf8", "record_id": "flaws_cloudtrail:0000465:cd76c62e-1c27-4500-a4b4-25bcef023cf8", "row_index": 465, "timestamp": "2017-05-27T05:30:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd76c62e-1c27-4500-a4b4-25bcef023cf8", "eventTime": "2017-05-27T05:30:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAP6TSXW29YL8NBZCM", "expiration": "May 27, 2017 6:30:01 AM", "sessionToken": "FQoDYXdzECcaDAqV3flARet8MGeipCLMAa8ne68Yc8mcuSrJU8DsPI5aZUCToMd/RjQHoOvwfAEeNWXTr5C6haVLyfukmGaBNpso5VcAQ6w1OlJwaLEDNo/Rop0GAoeLmEJ21pOdsdMqkXa1NjXgfRG7tyAcFvXdOyY/AjK6aqcTITKqfgJzmukpoYnye0StdmX8J1McHUMECwnUixOyTqZyMHdDcJhfJ4miFtQmLDP18fbCnUjfI6W9dOQLImbzlelDjDYtBK1kOqYd2SdoENwl73hM1i4pdT16ggBdUJCo6rY+nijZnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "803a4655-fb23-4445-8de3-c5b2306da169", "record_id": "flaws_cloudtrail:0000466:803a4655-fb23-4445-8de3-c5b2306da169", "row_index": 466, "timestamp": "2017-05-27T05:30:02Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAP6TSXW29YL8NBZCM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "803a4655-fb23-4445-8de3-c5b2306da169", "eventTime": "2017-05-27T05:30:02Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAP6TSXW29YL8NBZCM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:30:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02011cd-ce37-4840-8199-7e2d561cfa5a", "record_id": "flaws_cloudtrail:0000467:02011cd-ce37-4840-8199-7e2d561cfa5a", "row_index": 467, "timestamp": "2017-05-27T05:30:02Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02011cd-ce37-4840-8199-7e2d561cfa5a", "eventTime": "2017-05-27T05:30:02Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKBNE4HLS8VV59IM4", "expiration": "May 27, 2017 6:30:02 AM", "sessionToken": "FQoDYXdzECcaDG/uP1FdohXvP1U8qiLMAUn4/73gZ+ST2DgH2hdUDRpVonfeZP/cHiRA/as1cyodxLWAFHdeemfF3rjuX5no4ZGR6d2subXXSqHTyANpSS/cCkKFD2aOhLq2pdEPm0mEV06KetrRP1Fmhn4jC2bdSzEzd+nEwSWxXk0js1Zd+EB4WQAveD9cOlOCEkf3PpoTylHsYqy1yOymC0/lAkkBLQkCjPhS/G4pyoSqxQWf+mi/aQIC7YbScjHE6gkRXuAN1pPDLYGzZeWT8isagtnvgYul/2Q+QBmbmi2aeCjanaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46cba1f7-2718-48c1-a059-21a23461dcae", "record_id": "flaws_cloudtrail:0000468:46cba1f7-2718-48c1-a059-21a23461dcae", "row_index": 468, "timestamp": "2017-05-27T05:30:03Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKBNE4HLS8VV59IM4", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46cba1f7-2718-48c1-a059-21a23461dcae", "eventTime": "2017-05-27T05:30:03Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKBNE4HLS8VV59IM4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:30:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91851f7-a701-4805-8b3d-b3a3e73ba2ed", "record_id": "flaws_cloudtrail:0000469:91851f7-a701-4805-8b3d-b3a3e73ba2ed", "row_index": 469, "timestamp": "2017-05-27T05:30:04Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6GMFSA8KWJITWZ9L", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91851f7-a701-4805-8b3d-b3a3e73ba2ed", "eventTime": "2017-05-27T05:30:04Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6GMFSA8KWJITWZ9L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:30:04Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1abae82d-5278-4bbb-88cb-938796ad952b", "record_id": "flaws_cloudtrail:0000470:1abae82d-5278-4bbb-88cb-938796ad952b", "row_index": 470, "timestamp": "2017-05-27T05:30:04Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1abae82d-5278-4bbb-88cb-938796ad952b", "eventTime": "2017-05-27T05:30:04Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6GMFSA8KWJITWZ9L", "expiration": "May 27, 2017 6:30:04 AM", "sessionToken": "FQoDYXdzECcaDLbr78hYPFMW+HIwSSLMAU7zg2Z/Jb59vss3OHOJD9iXhT8J9P8oWczuFuNfrMm04wNl85UNli81j6cK78knbeiy9jbKuWaVWI+JrkRZZ0Xlr97kHUEsY5SQPZF+9EsW0nEq8tFBw+CnQEWLyElQbOo4ONmBcGeh7cHUQVbr0BPQ3AA0lbf5N8cZvfOXxyeLM+WRjmNL/VfpD7a6qA3zSJTwE6zUwPcmpMXj60HkH3fAOGJS/v121W9o5CF0DB6+KXfkvEJhJCVHHNapsFY8FUJVnDxXRDQ4yudaiyjcnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a407364-e926-4ad6-b876-7197f1088ba1", "record_id": "flaws_cloudtrail:0000471:a407364-e926-4ad6-b876-7197f1088ba1", "row_index": 471, "timestamp": "2017-05-27T05:30:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a407364-e926-4ad6-b876-7197f1088ba1", "eventTime": "2017-05-27T05:30:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1OIMP6XB6U0EFVFM", "expiration": "May 27, 2017 6:30:05 AM", "sessionToken": "FQoDYXdzECcaDK+RF8JdwhuHEHW7eCLMAXmc6jlMEhcUND8vpbG5k9uZ1mDlFIkRMm+rnq+n+ZPyXVhkkfY7U2I+7lEOwgyswwuhSOMbLhinATXy+QZRdQ460dY3ZnqxGPx7fuCbBjR5JuyvGhacTvAhAkuSCvsMHOJIzVrTOGgkAA+yCA8whx6BRwniOnq+ch/P2A6bQspFsZYn4ZXfmwmp7XIOLUeYpCh7zHlgQjmTyjg58MsVuYVJ/CDioBNTvXD8oGS6fl16kzMwz3OJD0Xtsj6f7i1rfF/eB/WNpibOUQ2B/yjdnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b64b880b-7787-4ab3-8b91-a633f592a890", "record_id": "flaws_cloudtrail:0000472:b64b880b-7787-4ab3-8b91-a633f592a890", "row_index": 472, "timestamp": "2017-05-27T05:30:06Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1OIMP6XB6U0EFVFM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b64b880b-7787-4ab3-8b91-a633f592a890", "eventTime": "2017-05-27T05:30:06Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1OIMP6XB6U0EFVFM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:30:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cae6b44-c26f-4280-8fc8-a0daead313176", "record_id": "flaws_cloudtrail:0000473:3cae6b44-c26f-4280-8fc8-a0daead313176", "row_index": 473, "timestamp": "2017-05-27T05:30:06Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cae6b44-c26f-4280-8fc8-a0daead313176", "eventTime": "2017-05-27T05:30:06Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA77J1IY7MZIRCIRFP", "expiration": "May 27, 2017 6:30:06 AM", "sessionToken": "FQoDYXdzECcaDEcbK0QFCavYCEAh/CLMAawD2ylE4JAN62DZBvPzxksG66UhrMuv/aAkHhM3v/TH5987QC3ZPIyrbkkgRcSziuq5Lpci5v/sZN7RphvWQ7QBy5UPfYNCqgHiX+A7u23dyhKukEJFbVXoOX6ZZl8+zLPk3UcZ+VMBSx5EgebmXraJTvAYqyu+HCjXGhfRzlKlmtWGFHliqqDfpRDm/PnqNIjq6bj+/JyQsao3Yek8tL4EqnU2RNW3qwrmQ2dHeCf/qLuRrzBYBJclB5oCOe+yJyyTUXl8Uv4zk1JycyjenaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a4e95d4-959f-471e-9b3c-bb06ec796bf6", "record_id": "flaws_cloudtrail:0000474:8a4e95d4-959f-471e-9b3c-bb06ec796bf6", "row_index": 474, "timestamp": "2017-05-27T05:30:07Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA77J1IY7MZIRCIRFP", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a4e95d4-959f-471e-9b3c-bb06ec796bf6", "eventTime": "2017-05-27T05:30:07Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA77J1IY7MZIRCIRFP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:30:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a16ab3a5-10fc-4b37-901b-6d66a6b875fc", "record_id": "flaws_cloudtrail:0000475:a16ab3a5-10fc-4b37-901b-6d66a6b875fc", "row_index": 475, "timestamp": "2017-05-27T05:30:08Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA34MIY3I10LR0OTKX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a16ab3a5-10fc-4b37-901b-6d66a6b875fc", "eventTime": "2017-05-27T05:30:08Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA34MIY3I10LR0OTKX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:30:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85c84b4b-b941-4d8d-a0a4-9bd11244a8a1", "record_id": "flaws_cloudtrail:0000476:85c84b4b-b941-4d8d-a0a4-9bd11244a8a1", "row_index": 476, "timestamp": "2017-05-27T05:30:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85c84b4b-b941-4d8d-a0a4-9bd11244a8a1", "eventTime": "2017-05-27T05:30:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIASYLRQ3H64YL96KME", "expiration": "May 27, 2017 6:30:08 AM", "sessionToken": "FQoDYXdzECcaDOsWiwNrnefN0GGftSLMAci3Je/pwjNh7o0BKDrezUKRFwsQO4YXdGU0UXHgtaETxS4YQulL0oH4o6/e6ckk9oIDSyDEuXaW89s3VAHTZrzdtR2agPQU+xn2q1WQ1rw9ezoZX00FJFvlfFMJlVf5GmjhdX3xH5ADv6KlyMaxyUIt9VWWPo90CL0cVtyYV+JyKaGq4U9wxVs7XAWQZIklkHNATX1fJct/X3iY6rlymTRUfOvPnd56FB5Ndh6Xud9pUm9xpL8eUJ85pCugz9R+1YZmUKnG/ward49qPijgnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41bd88fb-c2b2-4b9e-8b31-6ab896aeed91", "record_id": "flaws_cloudtrail:0000477:41bd88fb-c2b2-4b9e-8b31-6ab896aeed91", "row_index": 477, "timestamp": "2017-05-27T05:30:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41bd88fb-c2b2-4b9e-8b31-6ab896aeed91", "eventTime": "2017-05-27T05:30:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA34MIY3I10LR0OTKX", "expiration": "May 27, 2017 6:30:08 AM", "sessionToken": "FQoDYXdzECcaDObT7F5m8RZhx7epViLMAcAlmr5c4oBT0uxAL50c+gBtFo7Pi333zxv5j8YQj0G0nhxYp0BrgJqP6qS3U47sbzlDSWGUDG2ypqE3Ux6b7cagowOHN4gYibDlhTqWaBGcmeX6TgCL4iX2Rnn+5/rglLtc6933E8QEA2fg7te6832mUgw7LMVvLBLS+1SVigIHjvLPuftff5+V8Dv+dE9TeYJZzgREUK/X6C62xJofPIDHOk+Pqu+Olsgk015j7eUb04w2wWbefHI4LBjpKxpWlnnARjKdjQkgB2JA2ijgnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "249ce57d-0106-497a-b211-b354212d8b21", "record_id": "flaws_cloudtrail:0000478:249ce57d-0106-497a-b211-b354212d8b21", "row_index": 478, "timestamp": "2017-05-27T05:30:10Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASYLRQ3H64YL96KME", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "249ce57d-0106-497a-b211-b354212d8b21", "eventTime": "2017-05-27T05:30:10Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASYLRQ3H64YL96KME", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:30:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f35280-2b81-4ad1-881e-cd907c9fb9be", "record_id": "flaws_cloudtrail:0000479:1f35280-2b81-4ad1-881e-cd907c9fb9be", "row_index": 479, "timestamp": "2017-05-27T05:30:10Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f35280-2b81-4ad1-881e-cd907c9fb9be", "eventTime": "2017-05-27T05:30:10Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA80FQ6E2J6MXIZ8W4", "expiration": "May 27, 2017 6:30:10 AM", "sessionToken": "FQoDYXdzECcaDH4rMOxyHQMIgwF7WiLMARG4EdWdVKCTnSJjzHoiyk3o4Nmum8s7U2LkwfSTpXa5QVY6SZsoNwRLy5GKHGxRxZEOcToX3zARAUifwmDQ+Gz5tZxdftSTcGOODzuQI03wr6X9piIyUb0/5ey/tDUVjaS6KCXNkJ9DsofSCmKWCn8WSJ0DHK1PEAc5/Bda9+4sJykCv2YIW0nFRWwr2Cib7ULNxQ2d0vI2L3coHWXq/zRqy2W+DFhVCj831+a9UvCMcpoopYFspOdGQMhtP37/s4EHIt9DWtmqINeX5CjinaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a58460a-7ae1-4f49-a6c3-f2c72f89f238", "record_id": "flaws_cloudtrail:0000480:8a58460a-7ae1-4f49-a6c3-f2c72f89f238", "row_index": 480, "timestamp": "2017-05-27T05:30:11Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA80FQ6E2J6MXIZ8W4", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a58460a-7ae1-4f49-a6c3-f2c72f89f238", "eventTime": "2017-05-27T05:30:11Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA80FQ6E2J6MXIZ8W4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:30:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2bb63f7-1c3f-4eea-93df-a5409c72e25c", "record_id": "flaws_cloudtrail:0000481:a2bb63f7-1c3f-4eea-93df-a5409c72e25c", "row_index": 481, "timestamp": "2017-05-27T05:30:11Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2bb63f7-1c3f-4eea-93df-a5409c72e25c", "eventTime": "2017-05-27T05:30:11Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAHAUQWIJ9027T6GDL", "expiration": "May 27, 2017 6:30:11 AM", "sessionToken": "FQoDYXdzECcaDFzFm6JyNM7mXRDnNyLMAchdHwYrtibF3qcdTxx3lUD0CJAaKXHpkdTKBx8bhwUbVdJSup2JIRsJRxh3cDyvMjbBBh7V2QGB4YwrQsSL4kaHd6kJl4o9aUwHZDnA9+5tC52CEEiR1n74rKl0mpJbnjqAfARfPVjCDFqkgkuubYXaFv6VV68+SktF8S+YPgP1O6SrDGUwrUcIOA9jITl9cVGRr6uY2LBmS4cQq3EDZf91x3LG7k+SxzLdPCs+EEmUBIWE+ZuVOLLdH0oklLEGxaFbkWLiw+k70w08/SjjnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9762ad3-cf56-46be-baa5-dda9cef49e88", "record_id": "flaws_cloudtrail:0000482:e9762ad3-cf56-46be-baa5-dda9cef49e88", "row_index": 482, "timestamp": "2017-05-27T05:30:12Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAHAUQWIJ9027T6GDL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9762ad3-cf56-46be-baa5-dda9cef49e88", "eventTime": "2017-05-27T05:30:12Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAHAUQWIJ9027T6GDL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:30:11Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd8faada-8e99-4abc-a75a-dca9eab2e131", "record_id": "flaws_cloudtrail:0000483:dd8faada-8e99-4abc-a75a-dca9eab2e131", "row_index": 483, "timestamp": "2017-05-27T05:30:13Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd8faada-8e99-4abc-a75a-dca9eab2e131", "eventTime": "2017-05-27T05:30:13Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3DX2C7Z3TYXEGVU1", "expiration": "May 27, 2017 6:30:13 AM", "sessionToken": "FQoDYXdzECcaDCbCqXfLuSeNUrSkwSLMAXGZjfljuyCGMERDQdUzWxY5lVHhC6BMJLq8bosZIJQeXWcJz8g30gMC8l/ekcIZw+CWkN4mqz07hGEbMm4mfYMpu9tAsKQ5s65Sj7ziz0oR0h1BCjIO4uDC8CVGA/YY/A3/bG4WhC49qtNoEi0mMqotQLZ+juy4/XQFojBsAdOww1MiUnwn+gyOQQ5ECjsav2F9PJL/K3lVK0xKu0fPiv8FLzKrAx2n7u3jJuS0DaQQNXtUmsSZYeF/qmFuOdcRy8n5HbK+3KdwLT2+MijlnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "977d43df-565a-4c06-8a81-b2e654620efb6", "record_id": "flaws_cloudtrail:0000484:977d43df-565a-4c06-8a81-b2e654620efb6", "row_index": 484, "timestamp": "2017-05-27T05:30:13Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "977d43df-565a-4c06-8a81-b2e654620efb6", "eventTime": "2017-05-27T05:30:13Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFYNWHGL85L8FL9L8", "expiration": "May 27, 2017 6:30:13 AM", "sessionToken": "FQoDYXdzECcaDCkajscygcqNUD7v5iLMAZYaSInOj/CyiJpMhjwhoXQ1bobObAXYgjHmebDIy3GreNcqZVGC/ZwClbHHT/xyMIoW8FMjjgxEg2QpojigwhS2Xz2bxDEwr39fgbdllNDffRGtzxddO3l4beRf1qwGyHbJNcE8JzUHtYZRt5V9oKPjOZCIhAUCviw4Bb9hhuAmaeEwGYnkvwzPyecSaers3A4e/7B1unYdYcuE+fmDYKs/kx7wsaO2eYE+kDoY8mTwR6oMgL0t+f8fMvcev1F0+YJtqjHergZHuzkSxSjlnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29c52a6d-d62d-469e-a3fc-8200c455e6f9", "record_id": "flaws_cloudtrail:0000485:29c52a6d-d62d-469e-a3fc-8200c455e6f9", "row_index": 485, "timestamp": "2017-05-27T05:30:13Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFYNWHGL85L8FL9L8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29c52a6d-d62d-469e-a3fc-8200c455e6f9", "eventTime": "2017-05-27T05:30:13Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFYNWHGL85L8FL9L8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:30:13Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cab6918a-e73a-4eb4-b7ee-27a0dcef71b6", "record_id": "flaws_cloudtrail:0000486:cab6918a-e73a-4eb4-b7ee-27a0dcef71b6", "row_index": 486, "timestamp": "2017-05-27T05:30:14Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cab6918a-e73a-4eb4-b7ee-27a0dcef71b6", "eventTime": "2017-05-27T05:30:14Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIARIJ1ZDZAPMNE3IWP", "expiration": "May 27, 2017 6:30:14 AM", "sessionToken": "FQoDYXdzECcaDDM1FeIKnZ45h+YnmSLMARakkq1sX30w3ILvdjSa2T1lXQaozfycJTJwYgg3GpxGtuCCWb3IA01GCjv/qHDkcznqe1cN7/OBGrqpaRmywrltKoFVWSHf1a6Q+4zTBqPCB1vkmo94wuffjXMMZRGdI/aS03zQ/JFdVWF/gVqxPQtf9vG0UDZIIDclgCpuunZUsc/3wzyy8MJyB0KHEWDgH8Df/gOxgzVnn9iY0eeVvvT0gjKFt/OaF1DFM2V0SYIfKM45iXX0dCfT9rFLz+S/l6+0Fz6ZnCdJIh66lCjmnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dc682ce-7815-4577-a12c-7324bdeb7f23", "record_id": "flaws_cloudtrail:0000487:8dc682ce-7815-4577-a12c-7324bdeb7f23", "row_index": 487, "timestamp": "2017-05-27T05:30:14Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3DX2C7Z3TYXEGVU1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dc682ce-7815-4577-a12c-7324bdeb7f23", "eventTime": "2017-05-27T05:30:14Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3DX2C7Z3TYXEGVU1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:30:13Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c345976fc-07c1-4002-9af9-169f37cc764f", "record_id": "flaws_cloudtrail:0000488:c345976fc-07c1-4002-9af9-169f37cc764f", "row_index": 488, "timestamp": "2017-05-27T05:30:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c345976fc-07c1-4002-9af9-169f37cc764f", "eventTime": "2017-05-27T05:30:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIALNXWHBE048NMTWBQ", "expiration": "May 27, 2017 6:30:15 AM", "sessionToken": "FQoDYXdzECcaDBDAtQkuajgM8q+yAyLMAfBDH8e0Rr1oaMBnLLwG/5AIspgxfpqLnijr904hrE2bBElGi2qQ4wbnbBVvJ85wNcGr6ZRj2ODu1EoU+ZIPtSlbpfkfy1WbXvPheI4x2ulNM2hfy9h2AeISrAJnCtD+306lIkpu6iWCuTapakLrWp1y8c5ZPOsc82q1h4NNj93Ba9lpQoTwmuWis/AgOMqqZsYmvBpuxmgDsSA7zg5rHGniexC83xOxRbxsMnjBmuvNdVlkV9yFlj7//ycMYqdhSa3HHoZSR1qRDohHSyjnnaTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e36b0b3-153a-4fc1-8b7c-07f0d388304a", "record_id": "flaws_cloudtrail:0000489:1e36b0b3-153a-4fc1-8b7c-07f0d388304a", "row_index": 489, "timestamp": "2017-05-27T05:30:15Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARIJ1ZDZAPMNE3IWP", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e36b0b3-153a-4fc1-8b7c-07f0d388304a", "eventTime": "2017-05-27T05:30:15Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARIJ1ZDZAPMNE3IWP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:30:14Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfdc0fce-6595-40b7-a677-b04bd75789", "record_id": "flaws_cloudtrail:0000490:dfdc0fce-6595-40b7-a677-b04bd75789", "row_index": 490, "timestamp": "2017-05-27T05:30:15Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIALNXWHBE048NMTWBQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfdc0fce-6595-40b7-a677-b04bd75789", "eventTime": "2017-05-27T05:30:15Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIALNXWHBE048NMTWBQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:30:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db861fed-029a-4591-9c97-1a0ba484584", "record_id": "flaws_cloudtrail:0000491:db861fed-029a-4591-9c97-1a0ba484584", "row_index": 491, "timestamp": "2017-05-27T05:30:16Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 945, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db861fed-029a-4591-9c97-1a0ba484584", "eventTime": "2017-05-27T05:30:16Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc86280c-b3b9-431b-ba46-b193680cb", "record_id": "flaws_cloudtrail:0000492:dc86280c-b3b9-431b-ba46-b193680cb", "row_index": 492, "timestamp": "2017-05-27T05:30:16Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc86280c-b3b9-431b-ba46-b193680cb", "eventTime": "2017-05-27T05:30:16Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f55ecd3-2711-43b7-94bf-a8d571b92d7b", "record_id": "flaws_cloudtrail:0000493:4f55ecd3-2711-43b7-94bf-a8d571b92d7b", "row_index": 493, "timestamp": "2017-05-27T05:30:16Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f55ecd3-2711-43b7-94bf-a8d571b92d7b", "eventTime": "2017-05-27T05:30:16Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31893f77-2630-458a-9a0f-37735db7f7be", "record_id": "flaws_cloudtrail:0000494:31893f77-2630-458a-9a0f-37735db7f7be", "row_index": 494, "timestamp": "2017-05-27T05:30:16Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1152, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31893f77-2630-458a-9a0f-37735db7f7be", "eventTime": "2017-05-27T05:30:16Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5e90775-27c4-497a-8774-f75fe2bb607a", "record_id": "flaws_cloudtrail:0000495:c5e90775-27c4-497a-8774-f75fe2bb607a", "row_index": 495, "timestamp": "2017-05-27T05:30:16Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5e90775-27c4-497a-8774-f75fe2bb607a", "eventTime": "2017-05-27T05:30:16Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f465ad5-d3d0-4107-9df5-59e6a47d19d2", "record_id": "flaws_cloudtrail:0000496:4f465ad5-d3d0-4107-9df5-59e6a47d19d2", "row_index": 496, "timestamp": "2017-05-27T05:30:16Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1118, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f465ad5-d3d0-4107-9df5-59e6a47d19d2", "eventTime": "2017-05-27T05:30:16Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf487b1a-207f-4947-9be6-e54efe6adeda", "record_id": "flaws_cloudtrail:0000497:bf487b1a-207f-4947-9be6-e54efe6adeda", "row_index": 497, "timestamp": "2017-05-27T05:30:16Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf487b1a-207f-4947-9be6-e54efe6adeda", "eventTime": "2017-05-27T05:30:16Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47c5a587-00ab-4726-88c1-4a0c790dad99", "record_id": "flaws_cloudtrail:0000498:47c5a587-00ab-4726-88c1-4a0c790dad99", "row_index": 498, "timestamp": "2017-05-27T05:30:17Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47c5a587-00ab-4726-88c1-4a0c790dad99", "eventTime": "2017-05-27T05:30:17Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b763893-19a9-4e75-9fdc-0304643a8229", "record_id": "flaws_cloudtrail:0000499:9b763893-19a9-4e75-9fdc-0304643a8229", "row_index": 499, "timestamp": "2017-05-27T05:30:17Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1138, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b763893-19a9-4e75-9fdc-0304643a8229", "eventTime": "2017-05-27T05:30:17Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e770b29-32a5-41e6-8374-1aa055cd4ccf", "record_id": "flaws_cloudtrail:0000500:9e770b29-32a5-41e6-8374-1aa055cd4ccf", "row_index": 500, "timestamp": "2017-05-27T05:30:17Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1037, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e770b29-32a5-41e6-8374-1aa055cd4ccf", "eventTime": "2017-05-27T05:30:17Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b834350a6-385c-4b73-a48f-fac7bab88815", "record_id": "flaws_cloudtrail:0000501:b834350a6-385c-4b73-a48f-fac7bab88815", "row_index": 501, "timestamp": "2017-05-27T05:30:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b834350a6-385c-4b73-a48f-fac7bab88815", "eventTime": "2017-05-27T05:30:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "079193d2-9cd7-4986-b07f-804ab0c2f674", "record_id": "flaws_cloudtrail:0000502:079193d2-9cd7-4986-b07f-804ab0c2f674", "row_index": 502, "timestamp": "2017-05-27T05:30:17Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "079193d2-9cd7-4986-b07f-804ab0c2f674", "eventTime": "2017-05-27T05:30:17Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e111c28-b5d0-4b0a-8283-608f8ff84db8", "record_id": "flaws_cloudtrail:0000503:9e111c28-b5d0-4b0a-8283-608f8ff84db8", "row_index": 503, "timestamp": "2017-05-27T05:30:18Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e111c28-b5d0-4b0a-8283-608f8ff84db8", "eventTime": "2017-05-27T05:30:18Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aaee75ac-f375-4a88-8445-1fe627c827b7", "record_id": "flaws_cloudtrail:0000504:aaee75ac-f375-4a88-8445-1fe627c827b7", "row_index": 504, "timestamp": "2017-05-27T05:30:18Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 999, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aaee75ac-f375-4a88-8445-1fe627c827b7", "eventTime": "2017-05-27T05:30:18Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f014563-7afd-493e-aa13-085b0367f0b6", "record_id": "flaws_cloudtrail:0000505:3f014563-7afd-493e-aa13-085b0367f0b6", "row_index": 505, "timestamp": "2017-05-27T05:30:18Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f014563-7afd-493e-aa13-085b0367f0b6", "eventTime": "2017-05-27T05:30:18Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchWebsiteConfiguration", "errorMessage": "The specified bucket does not have a website configuration", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70ee2a00-6bcc-4b8c-b4b6-34540dd542e", "record_id": "flaws_cloudtrail:0000506:70ee2a00-6bcc-4b8c-b4b6-34540dd542e", "row_index": 506, "timestamp": "2017-05-27T05:30:18Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70ee2a00-6bcc-4b8c-b4b6-34540dd542e", "eventTime": "2017-05-27T05:30:18Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df9f5f45-3ec3-487e-81c0-25df69f354356", "record_id": "flaws_cloudtrail:0000507:df9f5f45-3ec3-487e-81c0-25df69f354356", "row_index": 507, "timestamp": "2017-05-27T05:30:18Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df9f5f45-3ec3-487e-81c0-25df69f354356", "eventTime": "2017-05-27T05:30:18Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d20ad345-c010-4ca9-855b-cdc41419b705", "record_id": "flaws_cloudtrail:0000508:d20ad345-c010-4ca9-855b-cdc41419b705", "row_index": 508, "timestamp": "2017-05-27T05:30:18Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d20ad345-c010-4ca9-855b-cdc41419b705", "eventTime": "2017-05-27T05:30:18Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e7f8af2-97de-45aa-948d-61e47eb241f9", "record_id": "flaws_cloudtrail:0000509:5e7f8af2-97de-45aa-948d-61e47eb241f9", "row_index": 509, "timestamp": "2017-05-27T05:30:18Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e7f8af2-97de-45aa-948d-61e47eb241f9", "eventTime": "2017-05-27T05:30:18Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e70b933-396a-45f4-a5bd-c5f3347d9b21", "record_id": "flaws_cloudtrail:0000510:3e70b933-396a-45f4-a5bd-c5f3347d9b21", "row_index": 510, "timestamp": "2017-05-27T05:30:19Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e70b933-396a-45f4-a5bd-c5f3347d9b21", "eventTime": "2017-05-27T05:30:19Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c82cda08-8c4f-436c-a544-82046c73a6f", "record_id": "flaws_cloudtrail:0000511:c82cda08-8c4f-436c-a544-82046c73a6f", "row_index": 511, "timestamp": "2017-05-27T05:30:19Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c82cda08-8c4f-436c-a544-82046c73a6f", "eventTime": "2017-05-27T05:30:19Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b1f47c9-2c0f-4c58-a12c-1865c2639cd3", "record_id": "flaws_cloudtrail:0000512:9b1f47c9-2c0f-4c58-a12c-1865c2639cd3", "row_index": 512, "timestamp": "2017-05-27T05:30:19Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b1f47c9-2c0f-4c58-a12c-1865c2639cd3", "eventTime": "2017-05-27T05:30:19Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce07b0a0-8aba-4d9c-9183-911e98be9861", "record_id": "flaws_cloudtrail:0000513:ce07b0a0-8aba-4d9c-9183-911e98be9861", "row_index": 513, "timestamp": "2017-05-27T05:30:19Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce07b0a0-8aba-4d9c-9183-911e98be9861", "eventTime": "2017-05-27T05:30:19Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "067fceb9-9e6a-40b4-8058-e5c5431a6df8", "record_id": "flaws_cloudtrail:0000514:067fceb9-9e6a-40b4-8058-e5c5431a6df8", "row_index": 514, "timestamp": "2017-05-27T05:30:19Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "067fceb9-9e6a-40b4-8058-e5c5431a6df8", "eventTime": "2017-05-27T05:30:19Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e676dfe-5362-45dc-aa7a-2670d4c0dbb6", "record_id": "flaws_cloudtrail:0000515:9e676dfe-5362-45dc-aa7a-2670d4c0dbb6", "row_index": 515, "timestamp": "2017-05-27T05:30:19Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e676dfe-5362-45dc-aa7a-2670d4c0dbb6", "eventTime": "2017-05-27T05:30:19Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3207d5fc-4f98-423c-bf4b-8a14c50ab914", "record_id": "flaws_cloudtrail:0000516:3207d5fc-4f98-423c-bf4b-8a14c50ab914", "row_index": 516, "timestamp": "2017-05-27T05:30:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3207d5fc-4f98-423c-bf4b-8a14c50ab914", "eventTime": "2017-05-27T05:30:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eef144a2-0dcb-4325-b6b7-d71cb68abcff", "record_id": "flaws_cloudtrail:0000517:eef144a2-0dcb-4325-b6b7-d71cb68abcff", "row_index": 517, "timestamp": "2017-05-27T05:30:19Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eef144a2-0dcb-4325-b6b7-d71cb68abcff", "eventTime": "2017-05-27T05:30:19Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "294d53ca-1a0e-4500-8c35-8ef20876f5f", "record_id": "flaws_cloudtrail:0000518:294d53ca-1a0e-4500-8c35-8ef20876f5f", "row_index": 518, "timestamp": "2017-05-27T05:30:19Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "294d53ca-1a0e-4500-8c35-8ef20876f5f", "eventTime": "2017-05-27T05:30:19Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f35d11b4-6808-49a1-98a8-df5e36b9febb", "record_id": "flaws_cloudtrail:0000519:f35d11b4-6808-49a1-98a8-df5e36b9febb", "row_index": 519, "timestamp": "2017-05-27T05:30:19Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f35d11b4-6808-49a1-98a8-df5e36b9febb", "eventTime": "2017-05-27T05:30:19Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "327f3fb1-ee4a-4a52-ae58-ad8a558acc2c", "record_id": "flaws_cloudtrail:0000520:327f3fb1-ee4a-4a52-ae58-ad8a558acc2c", "row_index": 520, "timestamp": "2017-05-27T05:30:20Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "327f3fb1-ee4a-4a52-ae58-ad8a558acc2c", "eventTime": "2017-05-27T05:30:20Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f32b8591-2998-4230-9f32-e71990e7a06e", "record_id": "flaws_cloudtrail:0000521:f32b8591-2998-4230-9f32-e71990e7a06e", "row_index": 521, "timestamp": "2017-05-27T05:30:20Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f32b8591-2998-4230-9f32-e71990e7a06e", "eventTime": "2017-05-27T05:30:20Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bb1b538-16ac-4386-b5a6-5cae38ffa59e", "record_id": "flaws_cloudtrail:0000522:0bb1b538-16ac-4386-b5a6-5cae38ffa59e", "row_index": 522, "timestamp": "2017-05-27T05:30:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bb1b538-16ac-4386-b5a6-5cae38ffa59e", "eventTime": "2017-05-27T05:30:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c129f2a-947e-479a-abef-d0a7b136e922", "record_id": "flaws_cloudtrail:0000523:7c129f2a-947e-479a-abef-d0a7b136e922", "row_index": 523, "timestamp": "2017-05-27T05:30:20Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c129f2a-947e-479a-abef-d0a7b136e922", "eventTime": "2017-05-27T05:30:20Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86c448be-83cb-4df7-97d2-8fd2c195ce4a", "record_id": "flaws_cloudtrail:0000524:86c448be-83cb-4df7-97d2-8fd2c195ce4a", "row_index": 524, "timestamp": "2017-05-27T05:30:20Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86c448be-83cb-4df7-97d2-8fd2c195ce4a", "eventTime": "2017-05-27T05:30:20Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee9a8a94-483c-4387-ab7c-3e0cafbc5cb2", "record_id": "flaws_cloudtrail:0000525:ee9a8a94-483c-4387-ab7c-3e0cafbc5cb2", "row_index": 525, "timestamp": "2017-05-27T05:30:20Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee9a8a94-483c-4387-ab7c-3e0cafbc5cb2", "eventTime": "2017-05-27T05:30:20Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dd83d69-5812-418b-aa44-bf240836aa6c0", "record_id": "flaws_cloudtrail:0000526:9dd83d69-5812-418b-aa44-bf240836aa6c0", "row_index": 526, "timestamp": "2017-05-27T05:30:20Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1118, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dd83d69-5812-418b-aa44-bf240836aa6c0", "eventTime": "2017-05-27T05:30:20Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "657fe53a-0d1c-433e-9379-5e0192cc3801", "record_id": "flaws_cloudtrail:0000527:657fe53a-0d1c-433e-9379-5e0192cc3801", "row_index": 527, "timestamp": "2017-05-27T05:30:20Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1001, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "657fe53a-0d1c-433e-9379-5e0192cc3801", "eventTime": "2017-05-27T05:30:20Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "279bc054-6413-4434-91f2-9434c1b16bae", "record_id": "flaws_cloudtrail:0000528:279bc054-6413-4434-91f2-9434c1b16bae", "row_index": 528, "timestamp": "2017-05-27T05:30:20Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1152, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "279bc054-6413-4434-91f2-9434c1b16bae", "eventTime": "2017-05-27T05:30:20Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb096570b-a621-414d-8f65-b6fc7e41407a", "record_id": "flaws_cloudtrail:0000529:bb096570b-a621-414d-8f65-b6fc7e41407a", "row_index": 529, "timestamp": "2017-05-27T05:30:20Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb096570b-a621-414d-8f65-b6fc7e41407a", "eventTime": "2017-05-27T05:30:20Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dd33165-595a-4ff6-813f-9c41e216c495", "record_id": "flaws_cloudtrail:0000530:8dd33165-595a-4ff6-813f-9c41e216c495", "row_index": 530, "timestamp": "2017-05-27T05:30:20Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dd33165-595a-4ff6-813f-9c41e216c495", "eventTime": "2017-05-27T05:30:20Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c07a242e-daa4-4664-8dc1-8b8806da621a", "record_id": "flaws_cloudtrail:0000531:c07a242e-daa4-4664-8dc1-8b8806da621a", "row_index": 531, "timestamp": "2017-05-27T05:30:21Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c07a242e-daa4-4664-8dc1-8b8806da621a", "eventTime": "2017-05-27T05:30:21Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b5db7b4-9abd-4323-b578-c194c275495e", "record_id": "flaws_cloudtrail:0000532:8b5db7b4-9abd-4323-b578-c194c275495e", "row_index": 532, "timestamp": "2017-05-27T05:30:21Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b5db7b4-9abd-4323-b578-c194c275495e", "eventTime": "2017-05-27T05:30:21Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfd9ebbb-dfdc-44d5-bbde-c674e7689938", "record_id": "flaws_cloudtrail:0000533:cfd9ebbb-dfdc-44d5-bbde-c674e7689938", "row_index": 533, "timestamp": "2017-05-27T05:30:21Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfd9ebbb-dfdc-44d5-bbde-c674e7689938", "eventTime": "2017-05-27T05:30:21Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcca1d54-e306-4543-9e6b-4ce76db828da", "record_id": "flaws_cloudtrail:0000534:dcca1d54-e306-4543-9e6b-4ce76db828da", "row_index": 534, "timestamp": "2017-05-27T05:30:21Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1036, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcca1d54-e306-4543-9e6b-4ce76db828da", "eventTime": "2017-05-27T05:30:21Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0545ee17-dca7-4996-bb61-a361c23089b", "record_id": "flaws_cloudtrail:0000535:0545ee17-dca7-4996-bb61-a361c23089b", "row_index": 535, "timestamp": "2017-05-27T05:30:21Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0545ee17-dca7-4996-bb61-a361c23089b", "eventTime": "2017-05-27T05:30:21Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "917af99d-ed70-44fa-9976-12f054b282e1", "record_id": "flaws_cloudtrail:0000536:917af99d-ed70-44fa-9976-12f054b282e1", "row_index": 536, "timestamp": "2017-05-27T05:30:21Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "917af99d-ed70-44fa-9976-12f054b282e1", "eventTime": "2017-05-27T05:30:21Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "981e2b48-456f-4222-b9eb-0ca68347777d", "record_id": "flaws_cloudtrail:0000537:981e2b48-456f-4222-b9eb-0ca68347777d", "row_index": 537, "timestamp": "2017-05-27T05:30:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "981e2b48-456f-4222-b9eb-0ca68347777d", "eventTime": "2017-05-27T05:30:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5da9253f-50a2-49bd-80b7-641d0775eed7", "record_id": "flaws_cloudtrail:0000538:5da9253f-50a2-49bd-80b7-641d0775eed7", "row_index": 538, "timestamp": "2017-05-27T05:30:21Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5da9253f-50a2-49bd-80b7-641d0775eed7", "eventTime": "2017-05-27T05:30:21Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9165f607-c79f-467a-8594-d468b3344d9a", "record_id": "flaws_cloudtrail:0000539:9165f607-c79f-467a-8594-d468b3344d9a", "row_index": 539, "timestamp": "2017-05-27T05:30:21Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1040, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9165f607-c79f-467a-8594-d468b3344d9a", "eventTime": "2017-05-27T05:30:21Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cea1027-2b97-49fb-bfa1-417fb9ccbd82", "record_id": "flaws_cloudtrail:0000540:9cea1027-2b97-49fb-bfa1-417fb9ccbd82", "row_index": 540, "timestamp": "2017-05-27T05:30:21Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cea1027-2b97-49fb-bfa1-417fb9ccbd82", "eventTime": "2017-05-27T05:30:21Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "447841ae-a9bd-425d-9d9c-9ac5a974e732", "record_id": "flaws_cloudtrail:0000541:447841ae-a9bd-425d-9d9c-9ac5a974e732", "row_index": 541, "timestamp": "2017-05-27T05:30:21Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1118, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "447841ae-a9bd-425d-9d9c-9ac5a974e732", "eventTime": "2017-05-27T05:30:21Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c1585e5-dc56-4033-8261-9f02b968f504", "record_id": "flaws_cloudtrail:0000542:7c1585e5-dc56-4033-8261-9f02b968f504", "row_index": 542, "timestamp": "2017-05-27T05:30:22Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1033, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c1585e5-dc56-4033-8261-9f02b968f504", "eventTime": "2017-05-27T05:30:22Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07e733421-9975-46e8-8a91-6b1e85329ef", "record_id": "flaws_cloudtrail:0000543:07e733421-9975-46e8-8a91-6b1e85329ef", "row_index": 543, "timestamp": "2017-05-27T05:30:22Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07e733421-9975-46e8-8a91-6b1e85329ef", "eventTime": "2017-05-27T05:30:22Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f8c106f-fc67-41ec-9de4-87205f381c99", "record_id": "flaws_cloudtrail:0000544:0f8c106f-fc67-41ec-9de4-87205f381c99", "row_index": 544, "timestamp": "2017-05-27T05:30:22Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1036, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f8c106f-fc67-41ec-9de4-87205f381c99", "eventTime": "2017-05-27T05:30:22Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01e1b9cc-27f0-40a0-832a-16ffed5342ec", "record_id": "flaws_cloudtrail:0000545:01e1b9cc-27f0-40a0-832a-16ffed5342ec", "row_index": 545, "timestamp": "2017-05-27T05:30:22Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01e1b9cc-27f0-40a0-832a-16ffed5342ec", "eventTime": "2017-05-27T05:30:22Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ad9afc4-5dce-4155-af16-d5b1232d3392", "record_id": "flaws_cloudtrail:0000546:0ad9afc4-5dce-4155-af16-d5b1232d3392", "row_index": 546, "timestamp": "2017-05-27T05:30:22Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1040, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ad9afc4-5dce-4155-af16-d5b1232d3392", "eventTime": "2017-05-27T05:30:22Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f16a15e4-97f2-42ab-bc7d-35526bcfc10b", "record_id": "flaws_cloudtrail:0000547:f16a15e4-97f2-42ab-bc7d-35526bcfc10b", "row_index": 547, "timestamp": "2017-05-27T05:30:22Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f16a15e4-97f2-42ab-bc7d-35526bcfc10b", "eventTime": "2017-05-27T05:30:22Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a98d1a3-4a5e-47fe-922c-72b3509c5ce3", "record_id": "flaws_cloudtrail:0000548:2a98d1a3-4a5e-47fe-922c-72b3509c5ce3", "row_index": 548, "timestamp": "2017-05-27T05:30:22Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1118, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a98d1a3-4a5e-47fe-922c-72b3509c5ce3", "eventTime": "2017-05-27T05:30:22Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b355117-4692-41ac-ab75-4a6aec3114a5", "record_id": "flaws_cloudtrail:0000549:b355117-4692-41ac-ab75-4a6aec3114a5", "row_index": 549, "timestamp": "2017-05-27T05:30:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1020, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b355117-4692-41ac-ab75-4a6aec3114a5", "eventTime": "2017-05-27T05:30:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1e3c2a4-cbee-4909-a8f0-5c87c0bafdf3", "record_id": "flaws_cloudtrail:0000550:b1e3c2a4-cbee-4909-a8f0-5c87c0bafdf3", "row_index": 550, "timestamp": "2017-05-27T05:30:22Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1e3c2a4-cbee-4909-a8f0-5c87c0bafdf3", "eventTime": "2017-05-27T05:30:22Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7e274d0-38f2-45b2-b11a-c9a2a69b4077", "record_id": "flaws_cloudtrail:0000551:a7e274d0-38f2-45b2-b11a-c9a2a69b4077", "row_index": 551, "timestamp": "2017-05-27T05:30:22Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7e274d0-38f2-45b2-b11a-c9a2a69b4077", "eventTime": "2017-05-27T05:30:22Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43c46ad4-a736-4683-8ffe-d862a335055a", "record_id": "flaws_cloudtrail:0000552:43c46ad4-a736-4683-8ffe-d862a335055a", "row_index": 552, "timestamp": "2017-05-27T05:30:22Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43c46ad4-a736-4683-8ffe-d862a335055a", "eventTime": "2017-05-27T05:30:22Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfa3f8dd-717f-4ebc-abd5-60bdb919d3c8", "record_id": "flaws_cloudtrail:0000553:dfa3f8dd-717f-4ebc-abd5-60bdb919d3c8", "row_index": 553, "timestamp": "2017-05-27T05:30:23Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfa3f8dd-717f-4ebc-abd5-60bdb919d3c8", "eventTime": "2017-05-27T05:30:23Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a63f231d-5a01-42ab-820a-2e6fdcdbb6dd", "record_id": "flaws_cloudtrail:0000554:a63f231d-5a01-42ab-820a-2e6fdcdbb6dd", "row_index": 554, "timestamp": "2017-05-27T05:30:23Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1150, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a63f231d-5a01-42ab-820a-2e6fdcdbb6dd", "eventTime": "2017-05-27T05:30:23Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "458406ef9-f924-42f6-ad73-99c1f15826b", "record_id": "flaws_cloudtrail:0000555:458406ef9-f924-42f6-ad73-99c1f15826b", "row_index": 555, "timestamp": "2017-05-27T05:30:23Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "458406ef9-f924-42f6-ad73-99c1f15826b", "eventTime": "2017-05-27T05:30:23Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "456dd97b-5008-420e-b2a6-d4e98c296af5", "record_id": "flaws_cloudtrail:0000556:456dd97b-5008-420e-b2a6-d4e98c296af5", "row_index": 556, "timestamp": "2017-05-27T05:30:23Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1040, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "456dd97b-5008-420e-b2a6-d4e98c296af5", "eventTime": "2017-05-27T05:30:23Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01098-5d7f-4236-afa0-7fd700f3f4bf", "record_id": "flaws_cloudtrail:0000557:01098-5d7f-4236-afa0-7fd700f3f4bf", "row_index": 557, "timestamp": "2017-05-27T05:30:23Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1019, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01098-5d7f-4236-afa0-7fd700f3f4bf", "eventTime": "2017-05-27T05:30:23Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "433181a54-c717-4d9e-9efd-f6eae7615d7b", "record_id": "flaws_cloudtrail:0000558:433181a54-c717-4d9e-9efd-f6eae7615d7b", "row_index": 558, "timestamp": "2017-05-27T05:30:23Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1138, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "433181a54-c717-4d9e-9efd-f6eae7615d7b", "eventTime": "2017-05-27T05:30:23Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fde1a9d6-01f6-47aa-a4f5-932544edbab", "record_id": "flaws_cloudtrail:0000559:fde1a9d6-01f6-47aa-a4f5-932544edbab", "row_index": 559, "timestamp": "2017-05-27T05:30:23Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fde1a9d6-01f6-47aa-a4f5-932544edbab", "eventTime": "2017-05-27T05:30:23Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3745b954-ece9-405c-9eeb-a9823d988716", "record_id": "flaws_cloudtrail:0000560:3745b954-ece9-405c-9eeb-a9823d988716", "row_index": 560, "timestamp": "2017-05-27T05:30:23Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3745b954-ece9-405c-9eeb-a9823d988716", "eventTime": "2017-05-27T05:30:23Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "329850a-7ef6-43c7-80e4-0120d6522a84", "record_id": "flaws_cloudtrail:0000561:329850a-7ef6-43c7-80e4-0120d6522a84", "row_index": 561, "timestamp": "2017-05-27T05:30:23Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "329850a-7ef6-43c7-80e4-0120d6522a84", "eventTime": "2017-05-27T05:30:23Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86eda666-e63b-4d32-a7bc-4403d01f34a7", "record_id": "flaws_cloudtrail:0000562:86eda666-e63b-4d32-a7bc-4403d01f34a7", "row_index": 562, "timestamp": "2017-05-27T05:30:23Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1036, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86eda666-e63b-4d32-a7bc-4403d01f34a7", "eventTime": "2017-05-27T05:30:23Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29e1b280-42bd-40c0-ad66-976588135234", "record_id": "flaws_cloudtrail:0000563:29e1b280-42bd-40c0-ad66-976588135234", "row_index": 563, "timestamp": "2017-05-27T05:30:23Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29e1b280-42bd-40c0-ad66-976588135234", "eventTime": "2017-05-27T05:30:23Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77939ae2-093b-482a-b408-83b027c643f6", "record_id": "flaws_cloudtrail:0000564:77939ae2-093b-482a-b408-83b027c643f6", "row_index": 564, "timestamp": "2017-05-27T05:30:23Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1118, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77939ae2-093b-482a-b408-83b027c643f6", "eventTime": "2017-05-27T05:30:23Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5b072f7-0a48-4b36-9a15-1a847a840f75", "record_id": "flaws_cloudtrail:0000565:a5b072f7-0a48-4b36-9a15-1a847a840f75", "row_index": 565, "timestamp": "2017-05-27T05:30:24Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5b072f7-0a48-4b36-9a15-1a847a840f75", "eventTime": "2017-05-27T05:30:24Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1af8d9f-164c-4376-ae22-cb27f2711c35", "record_id": "flaws_cloudtrail:0000566:b1af8d9f-164c-4376-ae22-cb27f2711c35", "row_index": 566, "timestamp": "2017-05-27T05:30:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1021, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1af8d9f-164c-4376-ae22-cb27f2711c35", "eventTime": "2017-05-27T05:30:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30d6d2fc-7394-4500-a990-b8b9478be8b9", "record_id": "flaws_cloudtrail:0000567:30d6d2fc-7394-4500-a990-b8b9478be8b9", "row_index": 567, "timestamp": "2017-05-27T05:30:24Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30d6d2fc-7394-4500-a990-b8b9478be8b9", "eventTime": "2017-05-27T05:30:24Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b845e58-6151-46f1-ad17-5ccadc9d7e67", "record_id": "flaws_cloudtrail:0000568:6b845e58-6151-46f1-ad17-5ccadc9d7e67", "row_index": 568, "timestamp": "2017-05-27T05:30:24Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b845e58-6151-46f1-ad17-5ccadc9d7e67", "eventTime": "2017-05-27T05:30:24Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8af67a33-fd1a-437c-821f-dd96c6264a87", "record_id": "flaws_cloudtrail:0000569:8af67a33-fd1a-437c-821f-dd96c6264a87", "row_index": 569, "timestamp": "2017-05-27T05:30:24Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1036, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8af67a33-fd1a-437c-821f-dd96c6264a87", "eventTime": "2017-05-27T05:30:24Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db431a59-33a5-4808-87ec-9740391646af", "record_id": "flaws_cloudtrail:0000570:db431a59-33a5-4808-87ec-9740391646af", "row_index": 570, "timestamp": "2017-05-27T05:30:24Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db431a59-33a5-4808-87ec-9740391646af", "eventTime": "2017-05-27T05:30:24Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb3ebcb3-1298-40d2-b104-93343cc694f", "record_id": "flaws_cloudtrail:0000571:fb3ebcb3-1298-40d2-b104-93343cc694f", "row_index": 571, "timestamp": "2017-05-27T05:30:24Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb3ebcb3-1298-40d2-b104-93343cc694f", "eventTime": "2017-05-27T05:30:24Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0f9771b-af08-47ac-bc1d-2ce01a681364", "record_id": "flaws_cloudtrail:0000572:c0f9771b-af08-47ac-bc1d-2ce01a681364", "row_index": 572, "timestamp": "2017-05-27T05:30:24Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1151, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0f9771b-af08-47ac-bc1d-2ce01a681364", "eventTime": "2017-05-27T05:30:24Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc14d8fb-eb30-4354-899b-5bb289626449", "record_id": "flaws_cloudtrail:0000573:dc14d8fb-eb30-4354-899b-5bb289626449", "row_index": 573, "timestamp": "2017-05-27T05:30:24Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc14d8fb-eb30-4354-899b-5bb289626449", "eventTime": "2017-05-27T05:30:24Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bea9866-e0a9-45f4-9dd8-aa816699c5c", "record_id": "flaws_cloudtrail:0000574:2bea9866-e0a9-45f4-9dd8-aa816699c5c", "row_index": 574, "timestamp": "2017-05-27T05:30:24Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1117, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bea9866-e0a9-45f4-9dd8-aa816699c5c", "eventTime": "2017-05-27T05:30:24Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe0649e6-cc56-4952-ad77-c237c792a877", "record_id": "flaws_cloudtrail:0000575:fe0649e6-cc56-4952-ad77-c237c792a877", "row_index": 575, "timestamp": "2017-05-27T05:30:25Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAVVCM6EFO0RRE4GGX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe0649e6-cc56-4952-ad77-c237c792a877", "eventTime": "2017-05-27T05:30:25Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAVVCM6EFO0RRE4GGX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fca8d1c-02d0-42e4-8467-50459b1b77a0", "record_id": "flaws_cloudtrail:0000576:2fca8d1c-02d0-42e4-8467-50459b1b77a0", "row_index": 576, "timestamp": "2017-05-27T05:30:25Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1152, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fca8d1c-02d0-42e4-8467-50459b1b77a0", "eventTime": "2017-05-27T05:30:25Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "ReplicationConfigurationNotFoundError", "errorMessage": "The replication configuration was not found", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb9beb53-5aa6-4ebf-b8f6-970404fa6d2", "record_id": "flaws_cloudtrail:0000577:fb9beb53-5aa6-4ebf-b8f6-970404fa6d2", "row_index": 577, "timestamp": "2017-05-27T05:30:25Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb9beb53-5aa6-4ebf-b8f6-970404fa6d2", "eventTime": "2017-05-27T05:30:25Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e1b57a3-de08-456d-9993-fe0b2a9e90f1", "record_id": "flaws_cloudtrail:0000578:7e1b57a3-de08-456d-9993-fe0b2a9e90f1", "row_index": 578, "timestamp": "2017-05-27T05:30:25Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e1b57a3-de08-456d-9993-fe0b2a9e90f1", "eventTime": "2017-05-27T05:30:25Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "867618ac4-26f4-424c-9e67-02fce1981d8c", "record_id": "flaws_cloudtrail:0000579:867618ac4-26f4-424c-9e67-02fce1981d8c", "row_index": 579, "timestamp": "2017-05-27T05:30:25Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "867618ac4-26f4-424c-9e67-02fce1981d8c", "eventTime": "2017-05-27T05:30:25Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6436fb9c-aa33-4298-b9ce-c5b1c0c29ce2", "record_id": "flaws_cloudtrail:0000580:6436fb9c-aa33-4298-b9ce-c5b1c0c29ce2", "row_index": 580, "timestamp": "2017-05-27T05:30:25Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1134, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6436fb9c-aa33-4298-b9ce-c5b1c0c29ce2", "eventTime": "2017-05-27T05:30:25Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d870c25-8939-460b-bf59-e48faca48f6e", "record_id": "flaws_cloudtrail:0000581:7d870c25-8939-460b-bf59-e48faca48f6e", "row_index": 581, "timestamp": "2017-05-27T05:30:25Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1040, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d870c25-8939-460b-bf59-e48faca48f6e", "eventTime": "2017-05-27T05:30:25Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "398766-319e-461f-8a1a-44cf86f8d36a", "record_id": "flaws_cloudtrail:0000582:398766-319e-461f-8a1a-44cf86f8d36a", "row_index": 582, "timestamp": "2017-05-27T05:30:25Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1034, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "398766-319e-461f-8a1a-44cf86f8d36a", "eventTime": "2017-05-27T05:30:25Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2ea4b83-9718-4506-9d23-a987743aec6", "record_id": "flaws_cloudtrail:0000583:a2ea4b83-9718-4506-9d23-a987743aec6", "row_index": 583, "timestamp": "2017-05-27T05:30:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1021, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2ea4b83-9718-4506-9d23-a987743aec6", "eventTime": "2017-05-27T05:30:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1df10c6-a6b1-432f-9e17-9a308e9ba3d8", "record_id": "flaws_cloudtrail:0000584:a1df10c6-a6b1-432f-9e17-9a308e9ba3d8", "row_index": 584, "timestamp": "2017-05-27T05:30:26Z", "event_type": "GetBucketLifecycle", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1df10c6-a6b1-432f-9e17-9a308e9ba3d8", "eventTime": "2017-05-27T05:30:26Z", "eventName": "GetBucketLifecycle", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchLifecycleConfiguration", "errorMessage": "The lifecycle configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"lifecycle": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "467807fe-cf07-4142-b1f2-3b4adb5b055a", "record_id": "flaws_cloudtrail:0000585:467807fe-cf07-4142-b1f2-3b4adb5b055a", "row_index": 585, "timestamp": "2017-05-27T05:30:26Z", "event_type": "GetBucketNotification", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1040, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "467807fe-cf07-4142-b1f2-3b4adb5b055a", "eventTime": "2017-05-27T05:30:26Z", "eventName": "GetBucketNotification", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"notification": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7c56cac-035e-4e2e-9913-420df009d1b8", "record_id": "flaws_cloudtrail:0000586:f7c56cac-035e-4e2e-9913-420df009d1b8", "row_index": 586, "timestamp": "2017-05-27T05:30:26Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7c56cac-035e-4e2e-9913-420df009d1b8", "eventTime": "2017-05-27T05:30:26Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"tagging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "103d0cb1-d7f6-468b-8f50-00ba58cdd033", "record_id": "flaws_cloudtrail:0000587:103d0cb1-d7f6-468b-8f50-00ba58cdd033", "row_index": 587, "timestamp": "2017-05-27T05:30:26Z", "event_type": "GetBucketCors", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1116, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "103d0cb1-d7f6-468b-8f50-00ba58cdd033", "eventTime": "2017-05-27T05:30:26Z", "eventName": "GetBucketCors", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchCORSConfiguration", "errorMessage": "The CORS configuration does not exist", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "cors": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "340a0624-1b35-4393-b887-e156a0d78b11", "record_id": "flaws_cloudtrail:0000588:340a0624-1b35-4393-b887-e156a0d78b11", "row_index": 588, "timestamp": "2017-05-27T05:30:26Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "340a0624-1b35-4393-b887-e156a0d78b11", "eventTime": "2017-05-27T05:30:26Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ab6ed95-df64-4bc7-ae8f-72f67402d8f3", "record_id": "flaws_cloudtrail:0000589:5ab6ed95-df64-4bc7-ae8f-72f67402d8f3", "row_index": 589, "timestamp": "2017-05-27T05:30:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ab6ed95-df64-4bc7-ae8f-72f67402d8f3", "eventTime": "2017-05-27T05:30:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a54eb5d-0ccd-45f3-9e82-869e67d38787", "record_id": "flaws_cloudtrail:0000590:8a54eb5d-0ccd-45f3-9e82-869e67d38787", "row_index": 590, "timestamp": "2017-05-27T05:30:26Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA97AFJX4A1GZJI08P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1036, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a54eb5d-0ccd-45f3-9e82-869e67d38787", "eventTime": "2017-05-27T05:30:26Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA97AFJX4A1GZJI08P", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:00:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7dabd85-efcc-49e2-ad6e-4d2355119fb1", "record_id": "flaws_cloudtrail:0000591:f7dabd85-efcc-49e2-ad6e-4d2355119fb1", "row_index": 591, "timestamp": "2017-05-27T05:30:34Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAA2GE6NPKD1V52QLO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.41.15.101", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 585, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7dabd85-efcc-49e2-ad6e-4d2355119fb1", "eventTime": "2017-05-27T05:30:34Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.41.15.101", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAA2GE6NPKD1V52QLO", "userName": "SecurityMokey"}, "requestParameters": {"userName": "SecurityMokey"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7124c973-d2dc-4398-b702-a93098736e18", "record_id": "flaws_cloudtrail:0000592:7124c973-d2dc-4398-b702-a93098736e18", "row_index": 592, "timestamp": "2017-05-27T05:35:26Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAA2GE6NPKD1V52QLO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.41.15.101", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMokey-elevated-31"], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7124c973-d2dc-4398-b702-a93098736e18", "eventTime": "2017-05-27T05:35:26Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.41.15.101", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAA2GE6NPKD1V52QLO", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMokey-elevated-31", "roleSessionName": "SecurityMokey-session"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMokey-elevated-31"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb3b3d4c-d11a-4a09-9be4-eb14548ef811", "record_id": "flaws_cloudtrail:0000593:eb3b3d4c-d11a-4a09-9be4-eb14548ef811", "row_index": 593, "timestamp": "2017-05-27T05:36:08Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAA2GE6NPKD1V52QLO", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "140.41.15.101", "user_agent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-1750"], "raw_record_size_bytes": 665, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb3b3d4c-d11a-4a09-9be4-eb14548ef811", "eventTime": "2017-05-27T05:36:08Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "140.41.15.101", "userAgent": "aws-cli/1.18.69 Python/3.6.0 Linux/4.14.181-140.257.amzn2.x86_64 botocore/1.16.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAA2GE6NPKD1V52QLO", "userName": "SecurityMokey"}, "requestParameters": {"bucketName": "prod-data-1750", "key": "reports/684.csv"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-1750"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2129a48-dff5-4439-a46b-c4489c8b853a", "record_id": "flaws_cloudtrail:0000594:a2129a48-dff5-4439-a46b-c4489c8b853a", "row_index": 594, "timestamp": "2017-05-27T05:44:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2129a48-dff5-4439-a46b-c4489c8b853a", "eventTime": "2017-05-27T05:44:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3YGSFWMOPKBJSJAQ", "expiration": "May 27, 2017 6:44:38 AM", "sessionToken": "FQoDYXdzECcaDGJGhkqMsS1ZdBG7aSLMAULAhM7zjD8rOFzWRqUCp5XOrSEsqs56vIwaD6Fy+OSnJZ2Vsd4lOAsmDgDy4d5Gr9jEU0YzPbhXa2xe6RhcozmCBpPMgVPezeM0kVAR7FjVAGHOs807VCm6qP/UmO6ppE52pSVLBNS0hlzXlMaOceYlYZwvNbCvEtoxFXqPwo5XiI8XSNu/0pLBM2IRGQdovHpevUDh7Yelz7M7UbP/Xmf/91ZaeIGLQT4ByLQ+sAQctWv+2Pz0D1P2hp0iPzDi2tP1MJr33pedLjN2wCjGpKTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d05c147-6001-480c-a4e8-1774da9d1102", "record_id": "flaws_cloudtrail:0000595:5d05c147-6001-480c-a4e8-1774da9d1102", "row_index": 595, "timestamp": "2017-05-27T05:44:38Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3YGSFWMOPKBJSJAQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d05c147-6001-480c-a4e8-1774da9d1102", "eventTime": "2017-05-27T05:44:38Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3YGSFWMOPKBJSJAQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:44:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "778a5407-7e39-4486-801a-81ee82ff8d62", "record_id": "flaws_cloudtrail:0000596:778a5407-7e39-4486-801a-81ee82ff8d62", "row_index": 596, "timestamp": "2017-05-27T05:44:38Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3YGSFWMOPKBJSJAQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "778a5407-7e39-4486-801a-81ee82ff8d62", "eventTime": "2017-05-27T05:44:38Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3YGSFWMOPKBJSJAQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:44:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0621e73-69bd-4529-b9c4-617251abcc6a", "record_id": "flaws_cloudtrail:0000597:d0621e73-69bd-4529-b9c4-617251abcc6a", "row_index": 597, "timestamp": "2017-05-27T05:44:39Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQE7WO90PR5VGZLFF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0621e73-69bd-4529-b9c4-617251abcc6a", "eventTime": "2017-05-27T05:44:39Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQE7WO90PR5VGZLFF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:44:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b8ffd95-9fd0-4b09-8242-94ea2f2c9969", "record_id": "flaws_cloudtrail:0000598:9b8ffd95-9fd0-4b09-8242-94ea2f2c9969", "row_index": 598, "timestamp": "2017-05-27T05:44:39Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQE7WO90PR5VGZLFF", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b8ffd95-9fd0-4b09-8242-94ea2f2c9969", "eventTime": "2017-05-27T05:44:39Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQE7WO90PR5VGZLFF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:44:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c03df55-113a-44d4-91a5-bddd3bdf7b0e", "record_id": "flaws_cloudtrail:0000599:6c03df55-113a-44d4-91a5-bddd3bdf7b0e", "row_index": 599, "timestamp": "2017-05-27T05:44:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c03df55-113a-44d4-91a5-bddd3bdf7b0e", "eventTime": "2017-05-27T05:44:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQE7WO90PR5VGZLFF", "expiration": "May 27, 2017 6:44:39 AM", "sessionToken": "FQoDYXdzECcaDEwiqZlP4SrAdcwZRyLMAX9cW6IgC0/nDQZaGOwwtbD7K+a6vnZ+vP4LgkaoU/z135pvm8XGGk/EIWHbt3hPPZWaoRyoui076rfice39b4RVNzpeqi52pWo7jVjTtu8J3f+MTZ9xgIqxoDOmTNI9jXRI0dfJzOA/3EmmrT3q4TLIbxyIS5AfwxF804/agmjkF4OEYGTPaE0lD8zkMlpr0xaxp7UurRBiAPSUgxHQdVCGBODWwkwD/ud4ezBuIHDzc0NE+tbQqLzREb5lCeIIVrOB7tpwSw7erpYcuSjHpKTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "846aea26-a3d5-4bbd-ac20-6eeef76788b7", "record_id": "flaws_cloudtrail:0000600:846aea26-a3d5-4bbd-ac20-6eeef76788b7", "row_index": 600, "timestamp": "2017-05-27T05:44:40Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "846aea26-a3d5-4bbd-ac20-6eeef76788b7", "eventTime": "2017-05-27T05:44:40Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQZ8CLRAYMJ3I2XGL", "expiration": "May 27, 2017 6:44:40 AM", "sessionToken": "FQoDYXdzECcaDP1VcVHZVJvrus00ZiLMATBF0skSbITKHY/EXEtzBs7xM2cNJMMnhxY2L6hMvvO3/iIAhYEGdjc3pCi2rblsUaXImfnDwlKzS9plg30lJA/xBgO6U8o0sSu93iSqd4a/haVn/vA2Qhoilfi1mQcQsf1wrzvdHMdh2lnoZ27mqQDzfDgsUsuT6kp3B+q18LPMXZJ0G6JEj7Km7iFBja1QuMH3eVrhOObPRHC2cNn977qn6HDZGyho6onAzNWAuvLCNQfrvUNP6K/fRaioXTOCuw6kxXSRVZplCqDJKijIpKTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd01ae88-6c60-4f91-9eed-d265e0f27a46", "record_id": "flaws_cloudtrail:0000601:fd01ae88-6c60-4f91-9eed-d265e0f27a46", "row_index": 601, "timestamp": "2017-05-27T05:44:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQZ8CLRAYMJ3I2XGL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd01ae88-6c60-4f91-9eed-d265e0f27a46", "eventTime": "2017-05-27T05:44:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQZ8CLRAYMJ3I2XGL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:44:40Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1df2fe0e-1fd4-4dd5-8ac1-f95507", "record_id": "flaws_cloudtrail:0000602:1df2fe0e-1fd4-4dd5-8ac1-f95507", "row_index": 602, "timestamp": "2017-05-27T05:44:41Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQZ8CLRAYMJ3I2XGL", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1df2fe0e-1fd4-4dd5-8ac1-f95507", "eventTime": "2017-05-27T05:44:41Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQZ8CLRAYMJ3I2XGL", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:44:40Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e033270c-5d27-4089-8b92-4facd4051d49", "record_id": "flaws_cloudtrail:0000603:2e033270c-5d27-4089-8b92-4facd4051d49", "row_index": 603, "timestamp": "2017-05-27T05:44:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e033270c-5d27-4089-8b92-4facd4051d49", "eventTime": "2017-05-27T05:44:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA55TVTZ3FMV22XHK6", "expiration": "May 27, 2017 6:44:41 AM", "sessionToken": "FQoDYXdzECcaDHgnBJKloQ39auKCJyLMAfB0aQVVQli58meevU1nSsRH0wJNSc5sXd9Xhmivg6E5BYkwt9GMF5KuTuv3CV/vZXROI/TaKhRHCgYZFlkRjdoDZrQimlyNga67Mq1/5CUT3BToILLPTVPr0qlt9X9cDIYo8pgX9lcbCRD4BjQaoGEldtqdUoJxrhEc+0fsV35nsR9awpoNJl5C1n+WlApyQK1zv0FbaxnKlrE4VfLQ8NwMgvxTVIb21qzyM97u1txpAXGQ3tHBAb+xuzPTG/u+a29/v9J7ZKIqZ5YqkijJpKTJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c403185-8a85-44cd-987c-6a8f20ab84b3", "record_id": "flaws_cloudtrail:0000604:8c403185-8a85-44cd-987c-6a8f20ab84b3", "row_index": 604, "timestamp": "2017-05-27T05:44:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA55TVTZ3FMV22XHK6", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c403185-8a85-44cd-987c-6a8f20ab84b3", "eventTime": "2017-05-27T05:44:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA55TVTZ3FMV22XHK6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:44:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c27c0f88-e436-48da-974d-3906895ea8ac", "record_id": "flaws_cloudtrail:0000605:c27c0f88-e436-48da-974d-3906895ea8ac", "row_index": 605, "timestamp": "2017-05-27T05:44:43Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA55TVTZ3FMV22XHK6", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c27c0f88-e436-48da-974d-3906895ea8ac", "eventTime": "2017-05-27T05:44:43Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA55TVTZ3FMV22XHK6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-27T05:44:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}