Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM principal appears to confirm who they are, survey the account’s audit-trail configuration, and then take action to reduce CloudTrail visibility. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b59da4d8-10e0-4c0a-8ae9-225f3a368daf", "record_id": "flaws_cloudtrail:0000000:b59da4d8-10e0-4c0a-8ae9-225f3a368daf", "row_index": 0, "timestamp": "2018-04-18T03:36:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1826, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b59da4d8-10e0-4c0a-8ae9-225f3a368daf", "eventTime": "2018-04-18T03:36:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: KsUw0jQdKuarvBK-bmMebyKWUpaxef4vOtjfNOvSh4qLxBVwaoSgcnEv49ndWb0df5p5lUEg0VoRKUnwJrargbE3yBLdoFcLD4MzsQNp8N5fjXSMyPt2PiebPX8QWerdYG5XIm1P7lUriiLs9X1tDjpv-475IKdprLMBR8TooFIEw0wwcPZc5Q6C9DkhCnVg0O878QzwSGhc9RORZddrw1rNy3VKqBWtVFIVwlB0Rq_VcXg1x0q0Olt9ii3jRoWg698jpsSWK2eh7IFNrhWdCeCjwl9OST6oxxEqn73iu3iGYh7npe6Vj8fI6bAznxA8vG_1yGVL0HyqXEljUfJjk5F7C6ymy6rGadwrxmN_81R_EoOWn6SypNmAxvGMsk7jkAT3ue6jbEoOPx0EZCvt5ZzRv19kc-kqWyXzeHNtbXQPcmpnd_WEy_vdFwKGHM5XiUqIXWB_AV5N6eULWrr8PKcVSUnZHopUgAUojy3lwSrfEUQJU9GafGeF-GxBDE0KFLVknr4IyyzEkbsJ8HEPC8rd0gjpUARdgYQNkaLSbC1oicTlt57q6x9z9JTWpDCs_nK2EN46nGEjlNSDOoBaGoq2jFgIHl8GXJRl3VMBCE1pmtc_rFefiVGxsN2ojYL8IwseFpfHYbkJdMXL_KiQ4jYlroNQaFOFlw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c16798de-27c2-4c1a-be10-1a45faaa5489", "record_id": "flaws_cloudtrail:0000001:c16798de-27c2-4c1a-be10-1a45faaa5489", "row_index": 1, "timestamp": "2018-04-18T03:36:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c16798de-27c2-4c1a-be10-1a45faaa5489", "eventTime": "2018-04-18T03:36:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a19edc11-75e5-458c-bc89-740a1a3c36b4", "record_id": "flaws_cloudtrail:0000002:a19edc11-75e5-458c-bc89-740a1a3c36b4", "row_index": 2, "timestamp": "2018-04-18T03:36:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a19edc11-75e5-458c-bc89-740a1a3c36b4", "eventTime": "2018-04-18T03:36:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "296d71db-f595-459f-9dbb-341aa35f35b9", "record_id": "flaws_cloudtrail:0000003:296d71db-f595-459f-9dbb-341aa35f35b9", "row_index": 3, "timestamp": "2018-04-18T03:36:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "296d71db-f595-459f-9dbb-341aa35f35b9", "eventTime": "2018-04-18T03:36:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39bb9629-d8e2-4caa-bff1-e3f8e375fa2b", "record_id": "flaws_cloudtrail:0000004:39bb9629-d8e2-4caa-bff1-e3f8e375fa2b", "row_index": 4, "timestamp": "2018-04-18T03:36:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39bb9629-d8e2-4caa-bff1-e3f8e375fa2b", "eventTime": "2018-04-18T03:36:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b11c8e76-9571-4ab3-85d4-30e47ee4b2a7", "record_id": "flaws_cloudtrail:0000005:b11c8e76-9571-4ab3-85d4-30e47ee4b2a7", "row_index": 5, "timestamp": "2018-04-18T03:36:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b11c8e76-9571-4ab3-85d4-30e47ee4b2a7", "eventTime": "2018-04-18T03:36:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60db6c91-7b0d-4529-a34d-9eea7f95d652", "record_id": "flaws_cloudtrail:0000006:60db6c91-7b0d-4529-a34d-9eea7f95d652", "row_index": 6, "timestamp": "2018-04-18T03:36:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60db6c91-7b0d-4529-a34d-9eea7f95d652", "eventTime": "2018-04-18T03:36:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: WA_BqCAZbPzbZm-cb8JK3b1h_BzLxurwFI6Vyw2VoCFkrzMTAxwGmtzZJlSusXw-WSYgFCvihNoE_3Sy58x0oaK4S2OWG-oMmGmCvoSNBrKOnOUEco1KAt-gkj_YQmGMFWeD15P1Ovaih0xAvz7kfCvPm915kfFaDfaVLGgZyxE-YUrJibAkKNtnn3KUatcxuhtMJXwhQNo3qVv3ejYQFcQepXldyNUA9meeAOzKT4Xcf5Sjyx7NzS2WkJ1zSZ2Sf1jeWr2L6n2xUTxWSl5Q6PIK5EwzMIr2EpIYtVVDHPa_Ae8eZi1HGXwHdaDz3Egn2Nh1jsz4ess1akWFSWuA1xahIZV64yRyjetYN3EHUF_LG31Hf9SWCK727glRfnmyGT2cNN7qGWgIRRswElAiXbGzSNoHlVphzCA0XOd9FX106Swsp4j20rQkpp14UnKJUi5WyFu09ILPDbxjjvSeud_ZomkPnDFA56ZV7Pb43eD2Rw0uAD3EGcS3nKe4En2N-Ws8BlSThrhRSUpPKOZ8D9jk4sCZBoJvEEiBuTY42eLM0NrC_ANUFQCM0HtncBYJ0w9QkjjPHE2Iw1To6jdrXFhc6hBnjQADCpBMIv0VRpLPaWY0qeBosfLoe3C5QTqIcalLZmQB0EwwLVvKmAOh7SR7AXTlKNgtsgvj8DCh", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23ecd1ec-33ee-4d13-b3fa-b14cd374ba1f", "record_id": "flaws_cloudtrail:0000007:23ecd1ec-33ee-4d13-b3fa-b14cd374ba1f", "row_index": 7, "timestamp": "2018-04-18T03:36:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23ecd1ec-33ee-4d13-b3fa-b14cd374ba1f", "eventTime": "2018-04-18T03:36:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "099f54dd-feb1-4750-bc15-1c630396b93b", "record_id": "flaws_cloudtrail:0000008:099f54dd-feb1-4750-bc15-1c630396b93b", "row_index": 8, "timestamp": "2018-04-18T03:36:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "099f54dd-feb1-4750-bc15-1c630396b93b", "eventTime": "2018-04-18T03:36:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: xYwNzcmckvLnz5kS3DTAffeqtsO862QaV7gvM-9QViZ5C1IiuV8ShLy3l8GDK3pGNZUG-MdB6UhLxrvsaXSl9YRVcDSZDRZ-ofNUyvB1cBnxilSAlSWL7IgRNR3FrD3TKSk7yRDJnOByemN0p0Ksdu5j6G4DF4M3F2zJZUcUN7jbAPfwWOVhFHkbRhrt8NDIFTp2xcNIAwm089amNFtRerMorKiJzdueYAthLJisTiWIOAsZd3t8Cei6nPYTY3JXfHBM0hYJ2t-XIQz-bWHI9VJK6MQNoeNKnI1b2liqwuR55R9cKV0M2zM91NUrQXIQ3F321h6u8nU-vL1C_0IDWSdf1qdtbTC6UrbjcjsJ3p8X3q2eaLts4uI75JOsYrlNZQ2U9L8fz-3ULj0JpJm1-7vTFDDuQHTjSZJJC8nK0udHo94UlMZy59pvr89hm3QIEoQ-EreMfp_gR94vf0HWvu2SOEo8zEzGQVEoqCxcFPzrS1fABuKe79ASlnAhPwW18kE90dVLM0JCP22SC638ZdNAU5iGDgtRxnm_RoArdIZObAZnxHPa2Hb0ooBKwrayw-GfK3hjvIguA5zE3ACqrZHmPTMm3NCTm_XKsu_LvOxDWD_sWiAWG-KaQslSYT19sOzN27vB0Vu9SsoEi0SrGYpIivLyTs328A", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bac3e910-43aa-4641-b384-cb42862fdc4", "record_id": "flaws_cloudtrail:0000009:bac3e910-43aa-4641-b384-cb42862fdc4", "row_index": 9, "timestamp": "2018-04-18T03:36:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bac3e910-43aa-4641-b384-cb42862fdc4", "eventTime": "2018-04-18T03:36:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d7baf11-d575-4ced-8b4b-ceb419cddf6a", "record_id": "flaws_cloudtrail:0000010:9d7baf11-d575-4ced-8b4b-ceb419cddf6a", "row_index": 10, "timestamp": "2018-04-18T03:36:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1172, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d7baf11-d575-4ced-8b4b-ceb419cddf6a", "eventTime": "2018-04-18T03:36:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96ce5fbb-b100-4ad7-9e19-ccd53435f20d", "record_id": "flaws_cloudtrail:0000011:96ce5fbb-b100-4ad7-9e19-ccd53435f20d", "row_index": 11, "timestamp": "2018-04-18T03:36:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96ce5fbb-b100-4ad7-9e19-ccd53435f20d", "eventTime": "2018-04-18T03:36:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 5bQQwIsb2ukoVh2CgRgSYYkSN5FLJN_NhE7QGeTTEQ2ZN4vzR8Grq8pCH6yWBO5ALUX9K-ns1SFgCZNZCuz2UducjFMWkYir_fRPi3B0Cw9X10bvAkiSNKX0g3deNWA5_EjOFHP4ugwv4d72zkg1RUbhOzLDkP-oFURq7WBV_JBWWnr4Ur77rDozZkb4GKaYwIIoZGaa4f3np679DAsnY4PmhE6kq8Gj3FgmLetpN8IIbA_xZ9Ilk_b9u894a68WSN9D1HEDlraoGU6AQfxFxeggToP72xBHIKW5FYBf-QcyxRaI5cjrN1E2nIICOkYCmPFVTPhJmbt03xT_BDigMxq0RQYSS7vBLF_N962-jl8gEw0IcDXU1g08G4Qx9x_M_dr8D36by0SqglB3dJHnyo1cDpqJ0_lYCTxohWgmxjDSutPVPh2cwpN3rgB96pQsplMDINIhkE3rwz5_R5UzQjU9fvkmTvYv5y9fE3Y5TeqFB5bvSJNaCte-pbZI-fq561-G9NbjeXynbDgo8EU6tYnpxs8vvRKiQ8mu3q_YmGvga4c5fIlXbRPciHBdjP1uwr9NpfPRQuIo8CS-bgNqlpHvEu_oVOOwuzUJT_aprETqTsQC-JkLUwtXFgKXOarrsw8mZv8kpXd1j_gwJlYSvPf0cytOB14l9AE", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e3b46c3-dace-481a-b061-4dc7bbda7c34", "record_id": "flaws_cloudtrail:0000012:1e3b46c3-dace-481a-b061-4dc7bbda7c34", "row_index": 12, "timestamp": "2018-04-18T03:43:19Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e3b46c3-dace-481a-b061-4dc7bbda7c34", "eventTime": "2018-04-18T03:43:19Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "764482b07-e45b-49aa-8711-56b4c5b06eec", "record_id": "flaws_cloudtrail:0000013:764482b07-e45b-49aa-8711-56b4c5b06eec", "row_index": 13, "timestamp": "2018-04-18T03:43:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "764482b07-e45b-49aa-8711-56b4c5b06eec", "eventTime": "2018-04-18T03:43:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4e5c529-54ce-4d95-9a93-e9dddd4f0fb6", "record_id": "flaws_cloudtrail:0000014:e4e5c529-54ce-4d95-9a93-e9dddd4f0fb6", "row_index": 14, "timestamp": "2018-04-18T03:43:24Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4e5c529-54ce-4d95-9a93-e9dddd4f0fb6", "eventTime": "2018-04-18T03:43:24Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e20fed1-5238-416a-abe2-15f9d4adc3f2", "record_id": "flaws_cloudtrail:0000015:6e20fed1-5238-416a-abe2-15f9d4adc3f2", "row_index": 15, "timestamp": "2018-04-18T03:43:24Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e20fed1-5238-416a-abe2-15f9d4adc3f2", "eventTime": "2018-04-18T03:43:24Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e56e7e5d-c0b8-4114-8c1f-2f2095a7b7a6", "record_id": "flaws_cloudtrail:0000016:e56e7e5d-c0b8-4114-8c1f-2f2095a7b7a6", "row_index": 16, "timestamp": "2018-04-18T03:43:24Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e56e7e5d-c0b8-4114-8c1f-2f2095a7b7a6", "eventTime": "2018-04-18T03:43:24Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "219031-58aa-4830-b67d-8e89ae3504ad", "record_id": "flaws_cloudtrail:0000017:219031-58aa-4830-b67d-8e89ae3504ad", "row_index": 17, "timestamp": "2018-04-18T03:43:24Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "219031-58aa-4830-b67d-8e89ae3504ad", "eventTime": "2018-04-18T03:43:24Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1de474d8-dfc9-4585-9c90-979ced97cf73", "record_id": "flaws_cloudtrail:0000018:1de474d8-dfc9-4585-9c90-979ced97cf73", "row_index": 18, "timestamp": "2018-04-18T03:43:25Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1de474d8-dfc9-4585-9c90-979ced97cf73", "eventTime": "2018-04-18T03:43:25Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5962bb6-3623-4c2c-99d6-03e73e303cbd", "record_id": "flaws_cloudtrail:0000019:a5962bb6-3623-4c2c-99d6-03e73e303cbd", "row_index": 19, "timestamp": "2018-04-18T03:43:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5962bb6-3623-4c2c-99d6-03e73e303cbd", "eventTime": "2018-04-18T03:43:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7e677f4-b15e-4c53-a992-1f3addb3af92", "record_id": "flaws_cloudtrail:0000020:e7e677f4-b15e-4c53-a992-1f3addb3af92", "row_index": 20, "timestamp": "2018-04-18T03:43:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7e677f4-b15e-4c53-a992-1f3addb3af92", "eventTime": "2018-04-18T03:43:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e0c5551-7185-4d04-b29f-8104f6d01b94", "record_id": "flaws_cloudtrail:0000021:5e0c5551-7185-4d04-b29f-8104f6d01b94", "row_index": 21, "timestamp": "2018-04-18T03:43:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e0c5551-7185-4d04-b29f-8104f6d01b94", "eventTime": "2018-04-18T03:43:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4968f51-604b-44c9-8dfd-383598d68f66", "record_id": "flaws_cloudtrail:0000022:b4968f51-604b-44c9-8dfd-383598d68f66", "row_index": 22, "timestamp": "2018-04-18T03:43:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4968f51-604b-44c9-8dfd-383598d68f66", "eventTime": "2018-04-18T03:43:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98b53329-3def-46c6-8f73-0a6c668ab398", "record_id": "flaws_cloudtrail:0000023:98b53329-3def-46c6-8f73-0a6c668ab398", "row_index": 23, "timestamp": "2018-04-18T03:43:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98b53329-3def-46c6-8f73-0a6c668ab398", "eventTime": "2018-04-18T03:43:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55e57c3e-3745-4571-b16a-ff669791ed61", "record_id": "flaws_cloudtrail:0000024:55e57c3e-3745-4571-b16a-ff669791ed61", "row_index": 24, "timestamp": "2018-04-18T03:43:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55e57c3e-3745-4571-b16a-ff669791ed61", "eventTime": "2018-04-18T03:43:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aba6ed3-3a9d-4a1c-8214-e22f951008b3e", "record_id": "flaws_cloudtrail:0000025:6aba6ed3-3a9d-4a1c-8214-e22f951008b3e", "row_index": 25, "timestamp": "2018-04-18T03:43:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aba6ed3-3a9d-4a1c-8214-e22f951008b3e", "eventTime": "2018-04-18T03:43:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e985260-c2dd-41a7-afb1-5742c5a98cba", "record_id": "flaws_cloudtrail:0000026:5e985260-c2dd-41a7-afb1-5742c5a98cba", "row_index": 26, "timestamp": "2018-04-18T03:43:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e985260-c2dd-41a7-afb1-5742c5a98cba", "eventTime": "2018-04-18T03:43:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8e1e091-7d81-4482-8d8b-d17d565bf3b7", "record_id": "flaws_cloudtrail:0000027:e8e1e091-7d81-4482-8d8b-d17d565bf3b7", "row_index": 27, "timestamp": "2018-04-18T03:43:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8e1e091-7d81-4482-8d8b-d17d565bf3b7", "eventTime": "2018-04-18T03:43:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b75e6bf3-e599-4502-9995-bd47d43ddc3d", "record_id": "flaws_cloudtrail:0000028:b75e6bf3-e599-4502-9995-bd47d43ddc3d", "row_index": 28, "timestamp": "2018-04-18T03:43:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b75e6bf3-e599-4502-9995-bd47d43ddc3d", "eventTime": "2018-04-18T03:43:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "709a7a54-6287-4a18-9f17-7ac1b9270e38", "record_id": "flaws_cloudtrail:0000029:709a7a54-6287-4a18-9f17-7ac1b9270e38", "row_index": 29, "timestamp": "2018-04-18T03:43:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "709a7a54-6287-4a18-9f17-7ac1b9270e38", "eventTime": "2018-04-18T03:43:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46c9bd08-4143-405e-bead-b6a6873893f1", "record_id": "flaws_cloudtrail:0000030:46c9bd08-4143-405e-bead-b6a6873893f1", "row_index": 30, "timestamp": "2018-04-18T03:43:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46c9bd08-4143-405e-bead-b6a6873893f1", "eventTime": "2018-04-18T03:43:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6158c638-beea-4e55-8cb8-9a04c68671", "record_id": "flaws_cloudtrail:0000031:6158c638-beea-4e55-8cb8-9a04c68671", "row_index": 31, "timestamp": "2018-04-18T03:43:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6158c638-beea-4e55-8cb8-9a04c68671", "eventTime": "2018-04-18T03:43:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08ca1f16-bbab-4943-9b49-779d721010e", "record_id": "flaws_cloudtrail:0000032:08ca1f16-bbab-4943-9b49-779d721010e", "row_index": 32, "timestamp": "2018-04-18T03:43:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08ca1f16-bbab-4943-9b49-779d721010e", "eventTime": "2018-04-18T03:43:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65acb453-8cae-4ceb-aae1-07dd67f1f597", "record_id": "flaws_cloudtrail:0000033:65acb453-8cae-4ceb-aae1-07dd67f1f597", "row_index": 33, "timestamp": "2018-04-18T03:43:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65acb453-8cae-4ceb-aae1-07dd67f1f597", "eventTime": "2018-04-18T03:43:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e52ada2-d63f-4461-ae2c-f5e5f24ee816", "record_id": "flaws_cloudtrail:0000034:7e52ada2-d63f-4461-ae2c-f5e5f24ee816", "row_index": 34, "timestamp": "2018-04-18T03:43:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e52ada2-d63f-4461-ae2c-f5e5f24ee816", "eventTime": "2018-04-18T03:43:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43682fe1-65ab-4354-abbc-4f5fa5bf090d", "record_id": "flaws_cloudtrail:0000035:43682fe1-65ab-4354-abbc-4f5fa5bf090d", "row_index": 35, "timestamp": "2018-04-18T03:43:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43682fe1-65ab-4354-abbc-4f5fa5bf090d", "eventTime": "2018-04-18T03:43:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2896c91-f50b-40ae-a9c9-643f6a4ed6de", "record_id": "flaws_cloudtrail:0000036:e2896c91-f50b-40ae-a9c9-643f6a4ed6de", "row_index": 36, "timestamp": "2018-04-18T03:43:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2896c91-f50b-40ae-a9c9-643f6a4ed6de", "eventTime": "2018-04-18T03:43:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16123-aa98-48fb-9a26-fb2dea4b861b", "record_id": "flaws_cloudtrail:0000037:16123-aa98-48fb-9a26-fb2dea4b861b", "row_index": 37, "timestamp": "2018-04-18T03:43:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16123-aa98-48fb-9a26-fb2dea4b861b", "eventTime": "2018-04-18T03:43:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecfa5737-486e-4d8a-aa90-5bfd55dfba01", "record_id": "flaws_cloudtrail:0000038:ecfa5737-486e-4d8a-aa90-5bfd55dfba01", "row_index": 38, "timestamp": "2018-04-18T03:43:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecfa5737-486e-4d8a-aa90-5bfd55dfba01", "eventTime": "2018-04-18T03:43:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6bb2638-cd50-491a-9b72-ac2f1852bae3", "record_id": "flaws_cloudtrail:0000039:d6bb2638-cd50-491a-9b72-ac2f1852bae3", "row_index": 39, "timestamp": "2018-04-18T03:43:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6bb2638-cd50-491a-9b72-ac2f1852bae3", "eventTime": "2018-04-18T03:43:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad97e098-a970-4945-b448-8ed10f90b60f", "record_id": "flaws_cloudtrail:0000040:ad97e098-a970-4945-b448-8ed10f90b60f", "row_index": 40, "timestamp": "2018-04-18T03:43:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad97e098-a970-4945-b448-8ed10f90b60f", "eventTime": "2018-04-18T03:43:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: -OHP0bIRCiiTTTasdcmy0FKwMLfP1yZQnlyazx7_MiboJdsuLhNPScbJtr8c1YV0H8mLs2N_rMPxK6hkVzF4DkO0gl2_sc7Tbc8_JHDoujfsw25gCRX2vTjHrY9wEosQcvVj_PuZXVTO6gpk-xp3z3diOQt3ZwxtEkjB2kCXC7jxefcCVf-sZS78VEx2W1xEGilCTe9WAZHOkPzbNRgUWY9xxfOw2_IEE6eVX5zf8gZiVgM3Mv1pe3wHivBdPmydhjJFszQfQHZlXHOxSVAcoKfS5CemIFA7Z1spZroU9y0jye58HD1o1wCkZbM4Ak5MHAF1g-XAAp8paf_tGss3Reh-DaNLdlcSRa3K0xAIpjatQ-bXaHzTSYKL3pdHaTWvfmPXGFkUfSxp9B9rWK66JuIbot4-zS1-1XVyg4Or9srhAebdzPycMMowSWwOkrMUMQYXSOZ4VHqKPzuZB6ePEAqZXAgRfNGWj_0AbeYGTPs2t9tpk0vg8HgmsdCFzW2mTloRbNeInxoGf6So1Xz1HstI2hn2-JAUZj8zr0tGyROKqnI_v_NL_xvyCTmUH-1Pog5_QWWqjTKSjBCScRLjWQiVk3jw9wkqD2BhHrg6end9t5ax4BGIEXLsFwAUj3Xb6LxBoZMMt3VU7aNfLJjABSPUo9IOTpykIA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "827107-eca2-4ab8-a95e-c78353c3f42f", "record_id": "flaws_cloudtrail:0000041:827107-eca2-4ab8-a95e-c78353c3f42f", "row_index": 41, "timestamp": "2018-04-18T03:43:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "827107-eca2-4ab8-a95e-c78353c3f42f", "eventTime": "2018-04-18T03:43:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1aa86f22-643c-4f3f-b33f-6cdefde34c56", "record_id": "flaws_cloudtrail:0000042:1aa86f22-643c-4f3f-b33f-6cdefde34c56", "row_index": 42, "timestamp": "2018-04-18T03:43:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1aa86f22-643c-4f3f-b33f-6cdefde34c56", "eventTime": "2018-04-18T03:43:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be93274e-5179-4c94-b865-bae9505dc11d", "record_id": "flaws_cloudtrail:0000043:be93274e-5179-4c94-b865-bae9505dc11d", "row_index": 43, "timestamp": "2018-04-18T03:43:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be93274e-5179-4c94-b865-bae9505dc11d", "eventTime": "2018-04-18T03:43:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "887635b12-ad71-4e6c-a089-aa9182dba27a", "record_id": "flaws_cloudtrail:0000044:887635b12-ad71-4e6c-a089-aa9182dba27a", "row_index": 44, "timestamp": "2018-04-18T03:43:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1178, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "887635b12-ad71-4e6c-a089-aa9182dba27a", "eventTime": "2018-04-18T03:43:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f023feeb-c610-4b44-bf25-f39c639967", "record_id": "flaws_cloudtrail:0000045:f023feeb-c610-4b44-bf25-f39c639967", "row_index": 45, "timestamp": "2018-04-18T03:43:35Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f023feeb-c610-4b44-bf25-f39c639967", "eventTime": "2018-04-18T03:43:35Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28b9a4f9-349c-482b-834d-bd6aa9e62f81", "record_id": "flaws_cloudtrail:0000046:28b9a4f9-349c-482b-834d-bd6aa9e62f81", "row_index": 46, "timestamp": "2018-04-18T03:43:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1275, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28b9a4f9-349c-482b-834d-bd6aa9e62f81", "eventTime": "2018-04-18T03:43:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ba523a8-ebfd-4696-8f6d-22b2611581d8", "record_id": "flaws_cloudtrail:0000047:1ba523a8-ebfd-4696-8f6d-22b2611581d8", "row_index": 47, "timestamp": "2018-04-18T03:43:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1279, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ba523a8-ebfd-4696-8f6d-22b2611581d8", "eventTime": "2018-04-18T03:43:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c5bb22a-5eff-4fd9-80f4-2b898655dccc", "record_id": "flaws_cloudtrail:0000048:8c5bb22a-5eff-4fd9-80f4-2b898655dccc", "row_index": 48, "timestamp": "2018-04-18T03:43:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c5bb22a-5eff-4fd9-80f4-2b898655dccc", "eventTime": "2018-04-18T03:43:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: yhNRGKCNbFJzb0gHBPph7IEeQ0_uc71ya7nJ7NDi2SKairtOCNej89xqFh2B1PSv-YmI1sKzYx0V926CiblAeRt1j-r93z6xthiReZ33sIg6Y3W1TQxaF_hd0y4bGy03JST_2Ej-frx_MImh4mO1AGzygcy71cxdwDIXkVQFdgz4ARrzUTb523JBFBgTi5wUQ2KzTtC4xTNo7bSOLucDrC60bMHedMPCgIMOpWamG10Hc_OTe7Apa293c3eha8gTRNNdtpxZBpCM_Zo9LxRywldNit049sVLQMu7A4__VjVWqJwcnQabE69DhbHpBcQQPdewdqA_ruFv7QeKNln5SHup9btIo8lRIVeeXjEuf46do7vFlOyvB07kiPQAoT3MbrodQTwCM_0RlFXn--2v7Xo89puF6js_zQq-R8YPi63IB_5oGi7rnLrI6_vKB5gihreiN3AXgwWuoYXCeHCqIIHtl9gSPa46EwHxGWAFK_uku3w2OjnBCJv9R5xSbYtypJ5TNdiyiQbSV1xwi-lSgjl2E7GH98XxsvqYzdxnhfjbjkFXcCoIheSwi5cics4ShBlA_nHv7828dRvE-QlyOegV86lTb6DuWPI1Uy_M8PKNpsdSsrv6WNJTdhy102ksZYNS-lrvI45p84UFoevxjNZKOjhvu7pJyg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b826ee67-f301-4254-952e-1a70d56c3750", "record_id": "flaws_cloudtrail:0000049:b826ee67-f301-4254-952e-1a70d56c3750", "row_index": 49, "timestamp": "2018-04-18T03:43:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b826ee67-f301-4254-952e-1a70d56c3750", "eventTime": "2018-04-18T03:43:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92b0aa6d-dd34-49cb-8260-a27d5175ee3a", "record_id": "flaws_cloudtrail:0000050:92b0aa6d-dd34-49cb-8260-a27d5175ee3a", "row_index": 50, "timestamp": "2018-04-18T03:43:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1836, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92b0aa6d-dd34-49cb-8260-a27d5175ee3a", "eventTime": "2018-04-18T03:43:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 2N6MAdbou2dN2RN8vKNfrqgLpIpU3cCWYrHCEo3uUzZ0YZpubm2UVjWpwAy0sA8NFAeMkN_OPIhJ92vaArn52ll79QBjLiekNQAwXCA4-RXA_jfpuZ0lth2ljTSHWF1OuoJHvypFc75izHvnmguUd3JvhtYf2ydsoW2Pz8zAABCGcVBSpV0AboOjH8ZTshS2MDjskjOI4RUcy1_6TCaDZ8spzPMz5_Q6sww4Tmu52BzAIeiMrNhAjHqM7xnDRWY9otUgdvcKej21PqaIknyKZRVessCgGNOJhVGD3HONAz4MOM53EdlEpFz2KmiBRLdkVN6KrnrMJJ1xjXFWvLvwuQ27aEFkmds3fszXPu67uDDmEoNPvdugk167hQdxf8SNDIVnIWrtiRekgMYwd5G68pvZshox3Dn903dZ9eQ1nGtpe2VEjdUUXDIdVsXVljein2EzT6_MVPS3MJSAo9-LYDWs4Ot6UIb0859M1W9P978Ol_Lwq3N20VtDFaVwgHZor738SfrFisCMAawP_wUDaW07mRBqAm2ZYcBoxqrnXoujbqjiefr7RLo7wo2Y-7vD9jVSZZmQvpBgtzF8ZYBG1r0lt614lDwhE6PirAINKoh939rcoZiJZu_mdALpAVrdms18_IGSkNwkE0XVgWnjonVtKPwu3mFirOveaQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04ddd6af-266c-4e59-a858-c19c4077bef6", "record_id": "flaws_cloudtrail:0000051:04ddd6af-266c-4e59-a858-c19c4077bef6", "row_index": 51, "timestamp": "2018-04-18T03:43:37Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04ddd6af-266c-4e59-a858-c19c4077bef6", "eventTime": "2018-04-18T03:43:37Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "187f453e-b885-47a5-b37b-93785462c340", "record_id": "flaws_cloudtrail:0000052:187f453e-b885-47a5-b37b-93785462c340", "row_index": 52, "timestamp": "2018-04-18T03:43:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "187f453e-b885-47a5-b37b-93785462c340", "eventTime": "2018-04-18T03:43:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "330018e6-5199-45c7-b099-712f0d8ca675", "record_id": "flaws_cloudtrail:0000053:330018e6-5199-45c7-b099-712f0d8ca675", "row_index": 53, "timestamp": "2018-04-18T03:43:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "330018e6-5199-45c7-b099-712f0d8ca675", "eventTime": "2018-04-18T03:43:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: OTqIxGpJTHN3VHKxW-g3mzSG7O9GroXBuc6AKxFeaAtIHUq9mm4FlG4ZZNjg9h-0ulD2VKRSnm4Bduz_g3BKu2mwn8Z67NMlx5p4v_UEPHvF2dlOvs3hnHKmMFCkDy6tfZuL8xDJhuXXBjvRcaugf3i8PJMdgzYXsjdJyzQtsAaa3g12zv6nJ99TsHlK3fhufFi9dNyeOyxjZvYaSvaGj6JYjwM1gMNfzEhXYNkpJFXX7msiouHeLlwSX2St1DegWnZ0nwuQlyDd2RuAVbIg9ybjb4mIz7MkmvBAXdHQxTTRgygI9sXTSuY-VQVn8T7wvqOhE79owPPwOhLHoKrYIBxm2Zt2ivEwLiJog_5FJlXB02TG0wS7v5YuRVrAvnto1NXrpgFonpNUyJWR0Rlb70VzLI4PjU1epFpphtu7raU3MJP1sj-Ul_Q44lcvlSECSQpCON6DeDpWgABOhXA89-5rtndp8XBjhRMsMvma79iZxcxm2uH6LjIM_8_IrDpA__eQ5bm18izeb2tWUeenbOb98S3d8d8PSscsQKvlG5qlkvKC_7_1INdwMjrkWJruD2qF3I6oJBdSxx4iVVphdswS5VraGVVG9JFvmqHpJ3CZcLeZ4m1BKXceaJeb0FQX5KWQ0tNx2cr8fZ0_f5x7p2nY48GgpvcdOvrKk5ni", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51527ce-3bc9-4383-813f-947a03098cee", "record_id": "flaws_cloudtrail:0000054:51527ce-3bc9-4383-813f-947a03098cee", "row_index": 54, "timestamp": "2018-04-18T03:43:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51527ce-3bc9-4383-813f-947a03098cee", "eventTime": "2018-04-18T03:43:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "819e3740-6ae3-4c4e-ae98-b6da58ffd79d", "record_id": "flaws_cloudtrail:0000055:819e3740-6ae3-4c4e-ae98-b6da58ffd79d", "row_index": 55, "timestamp": "2018-04-18T03:43:40Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "819e3740-6ae3-4c4e-ae98-b6da58ffd79d", "eventTime": "2018-04-18T03:43:40Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea599596-3d7b-4f66-b86e-455ced8fa0ff", "record_id": "flaws_cloudtrail:0000056:ea599596-3d7b-4f66-b86e-455ced8fa0ff", "row_index": 56, "timestamp": "2018-04-18T03:43:40Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea599596-3d7b-4f66-b86e-455ced8fa0ff", "eventTime": "2018-04-18T03:43:40Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d69ac068-0823-461c-9838-23ba03a1971a", "record_id": "flaws_cloudtrail:0000057:d69ac068-0823-461c-9838-23ba03a1971a", "row_index": 57, "timestamp": "2018-04-18T03:43:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d69ac068-0823-461c-9838-23ba03a1971a", "eventTime": "2018-04-18T03:43:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f995540e-5f1f-496a-98c3-cbd1b29f606e", "record_id": "flaws_cloudtrail:0000058:f995540e-5f1f-496a-98c3-cbd1b29f606e", "row_index": 58, "timestamp": "2018-04-18T03:43:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f995540e-5f1f-496a-98c3-cbd1b29f606e", "eventTime": "2018-04-18T03:43:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 18rcZ0MBi0TyOixl9SsADyF0d7qH9145xK5PPdfcrLqMFXBp86MVH2BiG7ESylPZAhEGH5eLb02wivGxa1UXoTYYaHNgTnn1YEXAkLCQ59IzRoPc1tSq8OpIYHRe9Wov6dxIVxq9QSuIgFa5lOevq_Al1INXHqZwX4-6Bd9CaSMSM52jW9UiK2ZCy0Fl3btKBuU_M-mhvEeRz8Wtw5qQPG4lHDJfJOuJHpPyYzLc6SmHqvreEaZSxYS_K-5z_SINMHBtxr-LZVPOzpqsfySJfz5xm-zBoNT4EdT4k1jNDGSWTWgTIc53c3SALicvxfya12iL8w_N_LHl8EL2H4FM_FVNFXpTDOSD-d3Kaff_GwwlXVg3jCogGS3mjuIDuifgYzZcfd5NplxBRsdCiFjbKGFunEalxT7n9sISQiFU-0s9paVoYBdrA737dyMhJjhfE8ghNJLxDHTIf-C9m1ryW61YXn_o_8_PHSPHz9yVFkbP_HkDMapw9st2GBPgDH-i_7sTnGmgr_vR7HO2TU2hC0WTL3NTQnqZTCDAT4hFofBjP2t8zdvVsPD-wvNgrZyvsVG4CVR1TgemafC2Q2_px58UCMjB0XSAL_9hV2UddpmZmRw5gBemg50oi49DpeGFw6WWo1ekbUjTF6repiGU9lsKOM8LdwJSBQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "611989a17-a602-4bd7-b36c-37693f8c83e6", "record_id": "flaws_cloudtrail:0000059:611989a17-a602-4bd7-b36c-37693f8c83e6", "row_index": 59, "timestamp": "2018-04-18T03:43:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "611989a17-a602-4bd7-b36c-37693f8c83e6", "eventTime": "2018-04-18T03:43:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c79a6c77-7647-481b-a5af-5cc425f77a13", "record_id": "flaws_cloudtrail:0000060:c79a6c77-7647-481b-a5af-5cc425f77a13", "row_index": 60, "timestamp": "2018-04-18T03:43:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c79a6c77-7647-481b-a5af-5cc425f77a13", "eventTime": "2018-04-18T03:43:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63ce6d1e-f6ec-437f-9003-784c7591f5ad", "record_id": "flaws_cloudtrail:0000061:63ce6d1e-f6ec-437f-9003-784c7591f5ad", "row_index": 61, "timestamp": "2018-04-18T03:43:43Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63ce6d1e-f6ec-437f-9003-784c7591f5ad", "eventTime": "2018-04-18T03:43:43Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bfb6170-c389-442c-8115-b0ae3eebe8ec", "record_id": "flaws_cloudtrail:0000062:6bfb6170-c389-442c-8115-b0ae3eebe8ec", "row_index": 62, "timestamp": "2018-04-18T03:43:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bfb6170-c389-442c-8115-b0ae3eebe8ec", "eventTime": "2018-04-18T03:43:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f3e1a96-7cbd-47d1-98a1-7c61734adb0", "record_id": "flaws_cloudtrail:0000063:5f3e1a96-7cbd-47d1-98a1-7c61734adb0", "row_index": 63, "timestamp": "2018-04-18T03:43:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f3e1a96-7cbd-47d1-98a1-7c61734adb0", "eventTime": "2018-04-18T03:43:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f89dd64-c0be-4a9b-ae98-93e01befdba4", "record_id": "flaws_cloudtrail:0000064:5f89dd64-c0be-4a9b-ae98-93e01befdba4", "row_index": 64, "timestamp": "2018-04-18T03:43:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f89dd64-c0be-4a9b-ae98-93e01befdba4", "eventTime": "2018-04-18T03:43:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3751e084-2f0e-461a-8b0f-f90e721dedb9", "record_id": "flaws_cloudtrail:0000065:3751e084-2f0e-461a-8b0f-f90e721dedb9", "row_index": 65, "timestamp": "2018-04-18T03:43:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3751e084-2f0e-461a-8b0f-f90e721dedb9", "eventTime": "2018-04-18T03:43:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "458a2295-62a6-40ed-87fa-89585a0af25f", "record_id": "flaws_cloudtrail:0000066:458a2295-62a6-40ed-87fa-89585a0af25f", "row_index": 66, "timestamp": "2018-04-18T03:43:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "458a2295-62a6-40ed-87fa-89585a0af25f", "eventTime": "2018-04-18T03:43:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3d426aa-ba02-48cb-b05f-e6ea5d9839e4", "record_id": "flaws_cloudtrail:0000067:a3d426aa-ba02-48cb-b05f-e6ea5d9839e4", "row_index": 67, "timestamp": "2018-04-18T03:43:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3d426aa-ba02-48cb-b05f-e6ea5d9839e4", "eventTime": "2018-04-18T03:43:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c4c1f92-ba9c-4eb9-b09e-4c71b1e8241d", "record_id": "flaws_cloudtrail:0000068:7c4c1f92-ba9c-4eb9-b09e-4c71b1e8241d", "row_index": 68, "timestamp": "2018-04-18T03:43:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c4c1f92-ba9c-4eb9-b09e-4c71b1e8241d", "eventTime": "2018-04-18T03:43:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b6c7e34-ab10-49e5-b357-43013eccfb2", "record_id": "flaws_cloudtrail:0000069:3b6c7e34-ab10-49e5-b357-43013eccfb2", "row_index": 69, "timestamp": "2018-04-18T03:43:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b6c7e34-ab10-49e5-b357-43013eccfb2", "eventTime": "2018-04-18T03:43:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a63651-fa0f-4ed5-9c47-a5878c8fa1e6", "record_id": "flaws_cloudtrail:0000070:6a63651-fa0f-4ed5-9c47-a5878c8fa1e6", "row_index": 70, "timestamp": "2018-04-18T03:43:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a63651-fa0f-4ed5-9c47-a5878c8fa1e6", "eventTime": "2018-04-18T03:43:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5abdca39-ec30-4bbf-8378-da288ef706389", "record_id": "flaws_cloudtrail:0000071:5abdca39-ec30-4bbf-8378-da288ef706389", "row_index": 71, "timestamp": "2018-04-18T03:43:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5abdca39-ec30-4bbf-8378-da288ef706389", "eventTime": "2018-04-18T03:43:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46c523723-025c-441e-8d99-64aafd168576", "record_id": "flaws_cloudtrail:0000072:46c523723-025c-441e-8d99-64aafd168576", "row_index": 72, "timestamp": "2018-04-18T03:43:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46c523723-025c-441e-8d99-64aafd168576", "eventTime": "2018-04-18T03:43:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62db56f2-008c-43e9-bd27-d6deb3d4b13e", "record_id": "flaws_cloudtrail:0000073:62db56f2-008c-43e9-bd27-d6deb3d4b13e", "row_index": 73, "timestamp": "2018-04-18T03:43:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62db56f2-008c-43e9-bd27-d6deb3d4b13e", "eventTime": "2018-04-18T03:43:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "769615-debe-46e8-ae4f-04e6372d5e41", "record_id": "flaws_cloudtrail:0000074:769615-debe-46e8-ae4f-04e6372d5e41", "row_index": 74, "timestamp": "2018-04-18T03:43:47Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "769615-debe-46e8-ae4f-04e6372d5e41", "eventTime": "2018-04-18T03:43:47Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "facc1164-8144-48a1-97a6-7c04a09f2664", "record_id": "flaws_cloudtrail:0000075:facc1164-8144-48a1-97a6-7c04a09f2664", "row_index": 75, "timestamp": "2018-04-18T03:43:47Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "facc1164-8144-48a1-97a6-7c04a09f2664", "eventTime": "2018-04-18T03:43:47Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d35df6d-6047-4ca3-93fe-a8568ca9a51b", "record_id": "flaws_cloudtrail:0000076:6d35df6d-6047-4ca3-93fe-a8568ca9a51b", "row_index": 76, "timestamp": "2018-04-18T03:43:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d35df6d-6047-4ca3-93fe-a8568ca9a51b", "eventTime": "2018-04-18T03:43:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdc10c40-8ed2-40f3-a6a4-74d17fcc2449", "record_id": "flaws_cloudtrail:0000077:cdc10c40-8ed2-40f3-a6a4-74d17fcc2449", "row_index": 77, "timestamp": "2018-04-18T03:43:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdc10c40-8ed2-40f3-a6a4-74d17fcc2449", "eventTime": "2018-04-18T03:43:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e36c28ae-067d-43c5-ba21-9ec3faca6b2b", "record_id": "flaws_cloudtrail:0000078:e36c28ae-067d-43c5-ba21-9ec3faca6b2b", "row_index": 78, "timestamp": "2018-04-18T03:43:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e36c28ae-067d-43c5-ba21-9ec3faca6b2b", "eventTime": "2018-04-18T03:43:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2d9b292-1c75-420c-b448-39a425b0d823", "record_id": "flaws_cloudtrail:0000079:a2d9b292-1c75-420c-b448-39a425b0d823", "row_index": 79, "timestamp": "2018-04-18T03:43:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2d9b292-1c75-420c-b448-39a425b0d823", "eventTime": "2018-04-18T03:43:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: QhchERtEDSM1qofKbPX5nQCaZnfzGVnrawDO_YVQjoctmMXRBS3Thvjcf86jMd8LZPsVUAdBXFKwN1XuvBG8qCMiyCqnDWD2O8A2NawtnBOCRpynLHOVqvFFI4h4HcrZX8537igQiPxz_fr6yQpw0JazEFpeBr3G03z03jaafnTkYv1D86uzE_Fh1uhBFSwM4nkMkM-sjPHRTIjLIkpxPeBekn4MzOx_uBdwh-jVXO1x1oYErQwS_unM7y17m2WYK4YYqstZAu9Zl6cxEZrbgyCG4I5MC2dz25Y9GT71G2DLhr61me6N1M6Ztww-3jbLZhkDbgA06zbqgBnBtGSN1S2mcKbYhsSVZ0m55u996dgUbFG28BNgRqWiY6mKlqVX-gT6CIiJ6XNIhcNsDAcL7CVaA5-Sy47vr7LMxgUgXlLP_j4Mcoa2m0BrgwGlwy7fKTxZXz_l8htawlj8Vn-xqsq2mrxqb4pYxjTgb5mcxCVVGAiQds6RbHhmtZk7mCbrcvt-pI4ulW6AtgQ45TP4ndThvM5Es9btpd6bgCIMGb-6mq8oRNy4t2hD_8dOd2jfBCaAPGa_OOK_PhImMaPtvvSOpUGUSk8fKzoygpLhZsdI-SKXX9If3Cp-KegWoOBXLX_As2vRX218v7bwHmTyWe6aBA6OwkhSSD-jhIE", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddf03b7f-8dd0-45bc-bc11-f19b9fb0e778", "record_id": "flaws_cloudtrail:0000080:ddf03b7f-8dd0-45bc-bc11-f19b9fb0e778", "row_index": 80, "timestamp": "2018-04-18T03:43:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1832, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddf03b7f-8dd0-45bc-bc11-f19b9fb0e778", "eventTime": "2018-04-18T03:43:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 3T4WvQyADiI-Wy_ElIbcHXZaIXqCNmCOfhvapkFVCZ3XcYGzQOVLdwqy_hnxPiROHopsBrAFIyc0g4ixQlOz2VYF7jXAF00Ow5Pu3bDVceZ36cVByvtNPmhMWWwR9DRlsmLHEFhzum64lmwwzonrjavXAEGEGjOdeukaZtOmwiUoYgCqfbvoV3Q6tLmXVtQPmw2b7WrYP5YQ0ah6Ck2sXxZx2WZW7NzNSC9l5tKULUJR5WNQiEiV2lxjfaIXTwbkBGDGRqFkaL4vkVjfv1XZWZOXHm_oH7MG1zVlSep62k4WhjBZujzwEFwvebe7bZEMsCjS5dSnshUVzsG21INHwvvmd1CJRB_DVi2od53N4MlXlJuqANlOlMDLSEg3QzF7lygOBRwtyILeKPa9e3BHUHXJFRRnHGKhGCbRPDPPnpw92aHeugFBejwrfRP13JJazU4U02uq_4kgi743HByJ38cOYW-AxHb7jDT7qtlXy6w3wxr5Jb9LCqwk0gUmh52yJuM-_pIM7Rh07lYL1eoQKGCWpOE2XJg9lYRp13bDRF32m-g85X44sR0W1WGQ8cqrhrc-CemNkNkbCOIMbzM5JKkNKgyw2yTeoyc8s7GVCv4wIKCoa10VtnWCFPwnhfZCi47i7N1o5pzMAKd67hNIUVrfYvwPzHGufaxV", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05dd44ab-b50d-4b10-ae5b-fb878873844c", "record_id": "flaws_cloudtrail:0000081:05dd44ab-b50d-4b10-ae5b-fb878873844c", "row_index": 81, "timestamp": "2018-04-18T03:43:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05dd44ab-b50d-4b10-ae5b-fb878873844c", "eventTime": "2018-04-18T03:43:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "472111f82-4bdb-4c0b-bf58-72e01363b48", "record_id": "flaws_cloudtrail:0000082:472111f82-4bdb-4c0b-bf58-72e01363b48", "row_index": 82, "timestamp": "2018-04-18T03:43:50Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "472111f82-4bdb-4c0b-bf58-72e01363b48", "eventTime": "2018-04-18T03:43:50Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58882-6a35-4d27-bfed-e3013504d398", "record_id": "flaws_cloudtrail:0000083:58882-6a35-4d27-bfed-e3013504d398", "row_index": 83, "timestamp": "2018-04-18T03:43:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1279, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58882-6a35-4d27-bfed-e3013504d398", "eventTime": "2018-04-18T03:43:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2634d4dd-d2ac-40a5-8871-e806a302cfc2", "record_id": "flaws_cloudtrail:0000084:2634d4dd-d2ac-40a5-8871-e806a302cfc2", "row_index": 84, "timestamp": "2018-04-18T03:43:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2634d4dd-d2ac-40a5-8871-e806a302cfc2", "eventTime": "2018-04-18T03:43:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6933c4d9-f04f-4480-8121-065c2bf994ac", "record_id": "flaws_cloudtrail:0000085:6933c4d9-f04f-4480-8121-065c2bf994ac", "row_index": 85, "timestamp": "2018-04-18T03:43:51Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6933c4d9-f04f-4480-8121-065c2bf994ac", "eventTime": "2018-04-18T03:43:51Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e945e42-240c-4119-9e54-c943744a589a", "record_id": "flaws_cloudtrail:0000086:9e945e42-240c-4119-9e54-c943744a589a", "row_index": 86, "timestamp": "2018-04-18T03:43:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e945e42-240c-4119-9e54-c943744a589a", "eventTime": "2018-04-18T03:43:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: _vP6F_yscRnMLOJCZbuepG4BCCzQEZR9YGgxt1BrYwiWP_Uhf5rs6p1DfWG_HdSkyOZFDF-byoX5_A8Iuq5COlh0Pj0pvN7WY6DInphXL43PI3i9n5jTI48vI4QrKxIyfkxBQv639mA6bx5EAoKO3j0l0q4ZRVxTX5EEN4ttwUBZnGv_KkpGCVwO75XKOFuwtDJC7vSh7TuFo0uD0AjpfWLqovkKnHT5zjG9e3HQob1j8z7cvg8bzunuMHJUsD-J3BYgIXBxDfn4ds-9zCQ7hEgipLnPCzcEHXiICKHTK91RZLf17WR_XkEldBor8PrNn1IHDYPUeP-NNyAwfD6aIrzFmJVCUQCY1Rr5ihxsbddMthCPy4PpJTOkheLzm-WKnU-4vy8tSNqAJATuNDc536BgvV_CT4rmW7a10HnoaW4mX5auXPzy9B8fr2bX6V6zD2g11djhJ-zKtl7rSFeEXErE5R_69U84nEvtF2IvMvA6BMzxm2autZw2ec9QTBD0buceEY2Fi82gqpEcpt1L3UZ6MRh8Xlmvjz2Z7xlLV1VV2ODB_BD2MT-vXPPx2CZeIW9LMFjEmuW7JH2CPjIXFPihRH_usSxLLefCoVPne4FoDv9LDiewP8dR0VwX-SjtHGJ4FYzo7q2zVq-1xhnQcgCkDuEEjqXC-dU", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56e4784b-2609-415e-ba0a-cd17e19311da", "record_id": "flaws_cloudtrail:0000087:56e4784b-2609-415e-ba0a-cd17e19311da", "row_index": 87, "timestamp": "2018-04-18T03:43:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56e4784b-2609-415e-ba0a-cd17e19311da", "eventTime": "2018-04-18T03:43:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02afca3e-e53d-4341-8a38-8d3a1f81575e", "record_id": "flaws_cloudtrail:0000088:02afca3e-e53d-4341-8a38-8d3a1f81575e", "row_index": 88, "timestamp": "2018-04-18T03:43:52Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02afca3e-e53d-4341-8a38-8d3a1f81575e", "eventTime": "2018-04-18T03:43:52Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "629597b-45f9-482c-abcb-fb5097c1520d", "record_id": "flaws_cloudtrail:0000089:629597b-45f9-482c-abcb-fb5097c1520d", "row_index": 89, "timestamp": "2018-04-18T03:43:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "629597b-45f9-482c-abcb-fb5097c1520d", "eventTime": "2018-04-18T03:43:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5107a047-750e-48ac-ba80-8c3b0fde2dfa", "record_id": "flaws_cloudtrail:0000090:5107a047-750e-48ac-ba80-8c3b0fde2dfa", "row_index": 90, "timestamp": "2018-04-18T03:43:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5107a047-750e-48ac-ba80-8c3b0fde2dfa", "eventTime": "2018-04-18T03:43:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6404c16-0a6d-4c31-9c80-c97ef368ed79", "record_id": "flaws_cloudtrail:0000091:f6404c16-0a6d-4c31-9c80-c97ef368ed79", "row_index": 91, "timestamp": "2018-04-18T03:43:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6404c16-0a6d-4c31-9c80-c97ef368ed79", "eventTime": "2018-04-18T03:43:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15cd1189-962b-42ff-a13e-cb26a9d56f19", "record_id": "flaws_cloudtrail:0000092:15cd1189-962b-42ff-a13e-cb26a9d56f19", "row_index": 92, "timestamp": "2018-04-18T03:43:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15cd1189-962b-42ff-a13e-cb26a9d56f19", "eventTime": "2018-04-18T03:43:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c76c0bde-e2b3-44d1-830d-6122d030bf72", "record_id": "flaws_cloudtrail:0000093:c76c0bde-e2b3-44d1-830d-6122d030bf72", "row_index": 93, "timestamp": "2018-04-18T03:43:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c76c0bde-e2b3-44d1-830d-6122d030bf72", "eventTime": "2018-04-18T03:43:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7db16f8-71bf-402e-9042-5cff079d7cc1", "record_id": "flaws_cloudtrail:0000094:c7db16f8-71bf-402e-9042-5cff079d7cc1", "row_index": 94, "timestamp": "2018-04-18T03:43:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7db16f8-71bf-402e-9042-5cff079d7cc1", "eventTime": "2018-04-18T03:43:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b30f5d2-bab4-41e2-8f5b-c99933b77727", "record_id": "flaws_cloudtrail:0000095:6b30f5d2-bab4-41e2-8f5b-c99933b77727", "row_index": 95, "timestamp": "2018-04-18T03:43:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b30f5d2-bab4-41e2-8f5b-c99933b77727", "eventTime": "2018-04-18T03:43:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "585b74f3-9687-4b18-8171-a849a3a693ef", "record_id": "flaws_cloudtrail:0000096:585b74f3-9687-4b18-8171-a849a3a693ef", "row_index": 96, "timestamp": "2018-04-18T03:43:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "585b74f3-9687-4b18-8171-a849a3a693ef", "eventTime": "2018-04-18T03:43:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40c322ac-c0fb-4b04-8e1a-0a9cf135b231", "record_id": "flaws_cloudtrail:0000097:40c322ac-c0fb-4b04-8e1a-0a9cf135b231", "row_index": 97, "timestamp": "2018-04-18T03:43:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40c322ac-c0fb-4b04-8e1a-0a9cf135b231", "eventTime": "2018-04-18T03:43:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "361dfd9d-6723-4789-a0d2-c1eff8f621226", "record_id": "flaws_cloudtrail:0000098:361dfd9d-6723-4789-a0d2-c1eff8f621226", "row_index": 98, "timestamp": "2018-04-18T03:43:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "361dfd9d-6723-4789-a0d2-c1eff8f621226", "eventTime": "2018-04-18T03:43:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c16f133d-4605-4ea0-83d3-b4d57702e7", "record_id": "flaws_cloudtrail:0000099:c16f133d-4605-4ea0-83d3-b4d57702e7", "row_index": 99, "timestamp": "2018-04-18T03:43:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c16f133d-4605-4ea0-83d3-b4d57702e7", "eventTime": "2018-04-18T03:43:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4528ccfd-b7fb-4bf5-950a-67ed6117b16e", "record_id": "flaws_cloudtrail:0000100:4528ccfd-b7fb-4bf5-950a-67ed6117b16e", "row_index": 100, "timestamp": "2018-04-18T03:43:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4528ccfd-b7fb-4bf5-950a-67ed6117b16e", "eventTime": "2018-04-18T03:43:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80a2b76e-edc6-4586-9c0d-307649a49e0b", "record_id": "flaws_cloudtrail:0000101:80a2b76e-edc6-4586-9c0d-307649a49e0b", "row_index": 101, "timestamp": "2018-04-18T03:43:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80a2b76e-edc6-4586-9c0d-307649a49e0b", "eventTime": "2018-04-18T03:43:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0db3eee1-2172-4361-9471-a939192b7e730", "record_id": "flaws_cloudtrail:0000102:0db3eee1-2172-4361-9471-a939192b7e730", "row_index": 102, "timestamp": "2018-04-18T03:43:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0db3eee1-2172-4361-9471-a939192b7e730", "eventTime": "2018-04-18T03:43:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: aKU0n6Gvfs6unrR38HmyPW2eJOqZUsdnlKdtfDaKRug_xEUazBuWMwnp1FO7HitDLoh35ZVP2hyLEkQlEma-3LAXLFIGwyINhHuytVEat99gaWO7xJv4KWwhXigrgNNG7kIZm8hjitRQEUpUKDqJbE-ITtP7k1l1HErsrDHCOrg9x0MZYoSM9amr4A_ZuYIzsXXRSDGJhla8Pk8_1TuOW1WK_jNFtE5RaYMJVfJWlQoqUVERz1Z73tQ5tQZ3Wf7_IY1LtTQT6SgvxCzO1jwtizwfIjYDcn_xwTwVnahOHJjGhF5DkbG9hOyqc_mcFPdSSIkhSrLFYwszN59DgymCPpUwx0NsThnsT04Zmsd0zdpnVa16PDazkXRvH8mOwhXIG7TL2secG6fdcHitAIpPU2KgNXjelktOCf3VVyfsNoGBS3t3DuVQLyZwlbG3A772c-ycfqsTNRRhGtcpKStFjhGTpm-v5IZri_BxnBWXkuRFns_2aXViul4TK4a_FE-HFDnF3GqAv8b35BaXrcUFRYtwOoDEaO6n-mGRfQ8Xf_o0GD_n8wMSLEPWWUfGVjE1ET-20UUBNihr0vqk22h5NrUy8bCkCEvVfgEvJbJ0Arc_7aDKWsHmD7NdGPfwz1ObrDNT_BCWa9H9WXum5gonBFV1VhrSiUbtA0pO7Yk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "912bdb07-6204-4d18-bc07-c6ec4485f614", "record_id": "flaws_cloudtrail:0000103:912bdb07-6204-4d18-bc07-c6ec4485f614", "row_index": 103, "timestamp": "2018-04-18T03:43:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1279, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "912bdb07-6204-4d18-bc07-c6ec4485f614", "eventTime": "2018-04-18T03:43:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d7b3073-9094-4c93-9f53-c96ef97a9382", "record_id": "flaws_cloudtrail:0000104:3d7b3073-9094-4c93-9f53-c96ef97a9382", "row_index": 104, "timestamp": "2018-04-18T03:43:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d7b3073-9094-4c93-9f53-c96ef97a9382", "eventTime": "2018-04-18T03:43:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "946db825-dcfd-41e1-9873-8e22a6b8b3ad", "record_id": "flaws_cloudtrail:0000105:946db825-dcfd-41e1-9873-8e22a6b8b3ad", "row_index": 105, "timestamp": "2018-04-18T03:43:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "946db825-dcfd-41e1-9873-8e22a6b8b3ad", "eventTime": "2018-04-18T03:43:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a837020d-ca00-4352-9210-06c609917ca1", "record_id": "flaws_cloudtrail:0000106:a837020d-ca00-4352-9210-06c609917ca1", "row_index": 106, "timestamp": "2018-04-18T03:43:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a837020d-ca00-4352-9210-06c609917ca1", "eventTime": "2018-04-18T03:43:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dedc5405-40ec-4242-aaab-22856d56ac53", "record_id": "flaws_cloudtrail:0000107:dedc5405-40ec-4242-aaab-22856d56ac53", "row_index": 107, "timestamp": "2018-04-18T03:44:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dedc5405-40ec-4242-aaab-22856d56ac53", "eventTime": "2018-04-18T03:44:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90774fa1-64c6-4889-84a7-2b45bf383e34", "record_id": "flaws_cloudtrail:0000108:90774fa1-64c6-4889-84a7-2b45bf383e34", "row_index": 108, "timestamp": "2018-04-18T03:44:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90774fa1-64c6-4889-84a7-2b45bf383e34", "eventTime": "2018-04-18T03:44:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e6832bb-25c5-40e6-9b7b-ce982be12dc1", "record_id": "flaws_cloudtrail:0000109:3e6832bb-25c5-40e6-9b7b-ce982be12dc1", "row_index": 109, "timestamp": "2018-04-18T03:44:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e6832bb-25c5-40e6-9b7b-ce982be12dc1", "eventTime": "2018-04-18T03:44:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f427d91-6bc9-477c-94f7-adad67ce85e9", "record_id": "flaws_cloudtrail:0000110:5f427d91-6bc9-477c-94f7-adad67ce85e9", "row_index": 110, "timestamp": "2018-04-18T03:44:00Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f427d91-6bc9-477c-94f7-adad67ce85e9", "eventTime": "2018-04-18T03:44:00Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a447d837-ed44-4dad-8178-0031ddbb0071", "record_id": "flaws_cloudtrail:0000111:a447d837-ed44-4dad-8178-0031ddbb0071", "row_index": 111, "timestamp": "2018-04-18T03:44:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a447d837-ed44-4dad-8178-0031ddbb0071", "eventTime": "2018-04-18T03:44:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: YFZBZD_GJKuM4zHTYRhEArzBxosC7DY8UWUgB8193fPRV2tvFfxQBIvtbLfRAp-NzdTuAqhpsGWBuJuOZfXqGVlrqhWK0P7nsP-45UpgYNTXJcuT1oTOGkQ8b8ktuahTGc1z3PsthtKqTW2sk7RToBs9lKBZSgRPv_qNeux5Oe6y0ehJQF-2yIn_UYgGO8KQ8hHjsQoCp7_sTSGAi4V9rL-6QpYSClU0DfXQ5r5JzWgnipYo6icNG0jJxkjbCCJ_jQ4kslt8FQrDcOZGhZp4jcnY8qZIBkcpfrYMis9s57zU7nbKf2fdc77Aomyc-xmJ82J-GDMkvg6EjbiPTLkE9hdJuN6XVTjhszKtHjCeYqs0M_lHvaoVds6mp6ds24pvTryKBtoozT0eWayH7Yzp_09XuzxvNoAcQ2_zb37HrT4lIp3JX0_spTsRKM_gwOqYwmTniZTHLpvWXn-F_U3sxajbIb9U--lsxN0VajFGqcborTvEzS5E5pbG91-BHjFr6DyGBHyS0tQSzM8bIK8Ozx1IgZK_Wi3p0t8g8PDIhcOeNz1lCARIP7yIcEfSEpdY50Mp4mHUHCHZg27DGS_aFAV3_xl--JKHdeBkNuPcrdITl3FkyzHlNdBpxi-nLxgQapGKqMlpSDHgRw2-xXWNy9jAo8Ih798cuVo", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efb6e525-1a63-429a-b794-a6a795cd9f23", "record_id": "flaws_cloudtrail:0000112:efb6e525-1a63-429a-b794-a6a795cd9f23", "row_index": 112, "timestamp": "2018-04-18T03:44:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efb6e525-1a63-429a-b794-a6a795cd9f23", "eventTime": "2018-04-18T03:44:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a72d487-0016-46ec-9bc6-e178c2f5d9d4", "record_id": "flaws_cloudtrail:0000113:8a72d487-0016-46ec-9bc6-e178c2f5d9d4", "row_index": 113, "timestamp": "2018-04-18T03:44:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1275, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a72d487-0016-46ec-9bc6-e178c2f5d9d4", "eventTime": "2018-04-18T03:44:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fafe55e-b376-4c36-b4d1-67f66d3f7c9c", "record_id": "flaws_cloudtrail:0000114:6fafe55e-b376-4c36-b4d1-67f66d3f7c9c", "row_index": 114, "timestamp": "2018-04-18T03:44:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1172, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fafe55e-b376-4c36-b4d1-67f66d3f7c9c", "eventTime": "2018-04-18T03:44:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01b4df94-89e8-4054-9a2b-9e6311af6838", "record_id": "flaws_cloudtrail:0000115:01b4df94-89e8-4054-9a2b-9e6311af6838", "row_index": 115, "timestamp": "2018-04-18T03:44:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1832, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01b4df94-89e8-4054-9a2b-9e6311af6838", "eventTime": "2018-04-18T03:44:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: mAl7YWoYqZ7HW_ck0tWjX3ws9sLdz8Rl8fjkP4i7EEnbI05KZlPvxRqHKkkdu2jkN8poeianGbytfmbKbhe_wF3EhyyNdt-eBrBNF83rYiTNkBCfR9BIOoDdKowd58OaJx1aXNOp-HLEC-jK9SZ5goDwvnr_ptP_odiEo89bL0Zzo1JMplDJoaS3leMNGB77YkxaEVu7JIhdbrDY3fedzknttZdc0vTLj9XBK72Y2Lnynue1SZOqKIZESWEShQnAsVuwWvLmVI1w_cMkxBmEc-0R0GhDvde3sJs_r5ny5z_4PfOJJun2aPScQLJM_xmye3cOuNQPO8-xw2kVMOOmPWtV-9I2hLeRLjxeHDwC2COL3jZbutWLi-vywRxV0Yqu-OnVot29zJoxoAPwlkUVFe8GEU2BOnzcton0RoXmlwqT70JXz8F7KdwQunObRd4g_0ENkMIEm_7QkGcBdRynf0kmaTHqiBNtJW_Nv-9w5x2epYeIemAtfTF3saukwpAvZvk4a2-3M39sTra7y2l8JwhC5XbX9x1pprLnK5Vkc0u4OuKjb08LwqZxDM2qfO3EH0bf0x_ZR-tjJ4fBb9FR_6qQDcUgWYtfI6bAy1cP-dxnOl5s8Zto7FymjpBBiPXaA5XHwL_Zers4rKswm8I0RqR4u_v0-rG_J1pB", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "778073dc0-11a8-45cc-b86b-d108d5b22a88", "record_id": "flaws_cloudtrail:0000116:778073dc0-11a8-45cc-b86b-d108d5b22a88", "row_index": 116, "timestamp": "2018-04-18T03:44:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1279, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "778073dc0-11a8-45cc-b86b-d108d5b22a88", "eventTime": "2018-04-18T03:44:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a55def7a-ef8f-495a-b2a8-9810ccba5357", "record_id": "flaws_cloudtrail:0000117:a55def7a-ef8f-495a-b2a8-9810ccba5357", "row_index": 117, "timestamp": "2018-04-18T03:44:02Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a55def7a-ef8f-495a-b2a8-9810ccba5357", "eventTime": "2018-04-18T03:44:02Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f83cabd6-859d-422b-b2bc-cad0ec5386af", "record_id": "flaws_cloudtrail:0000118:f83cabd6-859d-422b-b2bc-cad0ec5386af", "row_index": 118, "timestamp": "2018-04-18T03:44:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1824, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f83cabd6-859d-422b-b2bc-cad0ec5386af", "eventTime": "2018-04-18T03:44:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: LnFWjd-hAc1F-cge0xPUGda7yBuI0m0XPnDX3U_wORwL9vaIlkzxNGH3MXgaC80Qel1Z52w59DjHCDcj8f0g20NQXIMz0z-vX083ujWW3ve2OwNpDB40leTUjH55JbQ0MWUbZ6a1H95o6zVbaGP59um3b3V9-3GHpH8dACzYBeH6UbRRf0UthAvtTPtGwkap1xR-mcL3f-2BiFVh_AfPTvckwDadwf-DHMl8n7-GseZkj09fZ_fiBo3jBQK4NLCd7GT6BHUH8AJgOOfFaX6QkXN68pEjd1Brk8hd-SvsUwVBswu4_xR-IAUKeCos-j9Q5ZV3XHZPH5li_xtHziuwm0jWhuuK-o6GhZP4Iqd6Tr5S6dUBw__etNECIR1cprkUSBS68lgLEQg8LW9S-yPKHokRkx7b_aBLB1Op23f_6adcRrKITa45Ju971YIZBOtLwQDfOdLOwUbNsXrsBcvjS2R36LrpDHjCZGHcoa16OTuZYnVyXZHLnSw-vSkVE6hOiqD5KDIf-mF-gCUpikMMVyk9QVEVXO7S0fvl9OTaXhmoRvkpK8TsZ4BDidIJ2kDyYt7qzdAjcHP2oU6QoDtVreC9j15m09qkZPuU9N4-vaR88Qk78yHy4-jizoKWV7Tm94U5UX4IrIP4_szBa7CuIUqTgVzAZirJIfs", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a336dc83-378d-4996-913f-96f9a0a12ef5", "record_id": "flaws_cloudtrail:0000119:a336dc83-378d-4996-913f-96f9a0a12ef5", "row_index": 119, "timestamp": "2018-04-18T03:44:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1830, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a336dc83-378d-4996-913f-96f9a0a12ef5", "eventTime": "2018-04-18T03:44:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: dNJFH2sExMqNtsPouK9hKLSkXo9EE2jSIWKVGQGx9BaIEwMXV4Da3l5Ww5E2IZrCmHMVcO0Z0AEjmgkrijySj__lucAn65rVXPpYpY9tGQ1UGgVidi4ejBvckUAAPoupKibjxWJKMjipyS900hMCjfsFAluFYORQsfmty4qqN2RixtmbmQ5pNrG3m0nDDs8j9t4jqdiMMuyaNwEhCwRQtWvETgefupx3StmeY1nPYPAFQFvA0xOSRbHIcQjRgt8Vrl02nZUSgx66LE4Y7bFMwAvP6uinrHHNj6CgkhxFH7FkD1xg7oUwiSPyCtgvCT7IQOUr2ocFGBjnYiC86_wFDojifH8p9G7UXIVz7UgpMzeht3NggziP9iqmb3G4ZzrlcwpSTHJC_M6cpeq0_fqkX-WJ4OlHeurrHMQCnCrs7UuVuoHhFVyJDXqfAx-qwnwThtJ78WAItx-r_EQ8ffGOiyRKH3y9GP1ozyyQIfh_Y8-7LJhArHurOQ2pNhBTL3Z0H4KrQ3bgMVmqUv83JxvKbip-WJC6wMyseqcdaOo9LVL3oUs_xh3IUQPGw3tlHDoqRBaab39dvDHSmfysuYF4vaqCrCu5FJiFsz7fom3U3DlD1ZXKkE-Sd9CvFWM_MCmGGvxw8laiTdzB6Qr4hp46hNFPkkbCzJHalZnB", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a27e5b1-1055-4093-99eb-58a5ce8e5308", "record_id": "flaws_cloudtrail:0000120:0a27e5b1-1055-4093-99eb-58a5ce8e5308", "row_index": 120, "timestamp": "2018-04-18T03:44:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a27e5b1-1055-4093-99eb-58a5ce8e5308", "eventTime": "2018-04-18T03:44:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32ee3304-3c97-4745-be23-da99a48322e2", "record_id": "flaws_cloudtrail:0000121:32ee3304-3c97-4745-be23-da99a48322e2", "row_index": 121, "timestamp": "2018-04-18T03:44:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32ee3304-3c97-4745-be23-da99a48322e2", "eventTime": "2018-04-18T03:44:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59aa8ac2-d3e4-4b2c-ba5d-4531d60b3d90", "record_id": "flaws_cloudtrail:0000122:59aa8ac2-d3e4-4b2c-ba5d-4531d60b3d90", "row_index": 122, "timestamp": "2018-04-18T03:44:06Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59aa8ac2-d3e4-4b2c-ba5d-4531d60b3d90", "eventTime": "2018-04-18T03:44:06Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fd8c15f-5142-4e55-879b-558c87480cbd", "record_id": "flaws_cloudtrail:0000123:4fd8c15f-5142-4e55-879b-558c87480cbd", "row_index": 123, "timestamp": "2018-04-18T03:44:06Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fd8c15f-5142-4e55-879b-558c87480cbd", "eventTime": "2018-04-18T03:44:06Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac3e5092-c5f2-4807-a640-53e6a235051", "record_id": "flaws_cloudtrail:0000124:ac3e5092-c5f2-4807-a640-53e6a235051", "row_index": 124, "timestamp": "2018-04-18T03:44:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac3e5092-c5f2-4807-a640-53e6a235051", "eventTime": "2018-04-18T03:44:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a04e9abc-b71e-4d24-82ae-037da2860634", "record_id": "flaws_cloudtrail:0000125:a04e9abc-b71e-4d24-82ae-037da2860634", "row_index": 125, "timestamp": "2018-04-18T03:44:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a04e9abc-b71e-4d24-82ae-037da2860634", "eventTime": "2018-04-18T03:44:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "090ebdb9-90fd-4dca-b868-edfea4e980089", "record_id": "flaws_cloudtrail:0000126:090ebdb9-90fd-4dca-b868-edfea4e980089", "row_index": 126, "timestamp": "2018-04-18T03:44:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "090ebdb9-90fd-4dca-b868-edfea4e980089", "eventTime": "2018-04-18T03:44:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8372e45a-40aa-443a-86d1-42d503865bab5", "record_id": "flaws_cloudtrail:0000127:8372e45a-40aa-443a-86d1-42d503865bab5", "row_index": 127, "timestamp": "2018-04-18T03:44:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8372e45a-40aa-443a-86d1-42d503865bab5", "eventTime": "2018-04-18T03:44:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a82f7d3-b48c-4cd4-9f20-9485cfad3f22", "record_id": "flaws_cloudtrail:0000128:7a82f7d3-b48c-4cd4-9f20-9485cfad3f22", "row_index": 128, "timestamp": "2018-04-18T03:44:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a82f7d3-b48c-4cd4-9f20-9485cfad3f22", "eventTime": "2018-04-18T03:44:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "488074fc-a4aa-42fa-aaf6-f1b4b00c99f2", "record_id": "flaws_cloudtrail:0000129:488074fc-a4aa-42fa-aaf6-f1b4b00c99f2", "row_index": 129, "timestamp": "2018-04-18T03:44:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1172, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "488074fc-a4aa-42fa-aaf6-f1b4b00c99f2", "eventTime": "2018-04-18T03:44:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01293ebc-07c3-4790-b260-8e102525ea", "record_id": "flaws_cloudtrail:0000130:01293ebc-07c3-4790-b260-8e102525ea", "row_index": 130, "timestamp": "2018-04-18T03:44:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1275, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01293ebc-07c3-4790-b260-8e102525ea", "eventTime": "2018-04-18T03:44:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eec432c9-3c1f-4033-97da-e2684b4c5fe5", "record_id": "flaws_cloudtrail:0000131:eec432c9-3c1f-4033-97da-e2684b4c5fe5", "row_index": 131, "timestamp": "2018-04-18T03:44:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eec432c9-3c1f-4033-97da-e2684b4c5fe5", "eventTime": "2018-04-18T03:44:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: DPYCmoO6N30IjRpdJ0veZimf_9eDJ_pwvAgZoU340tD0fKC2fa5egQp0Ur1uglFV9RYB3vTaa3_W6Ra-IlP_PbcL8Ig6v3wgXvBTtFhfB3lE4Y1ojUliK2VE3HfnuyEc3lp8kZB9WoPFMgRjTfiVnL__LYBvy1fJS14FZarx_ACniK8RxfUe6HiRnhJfZaiFNEq-_inJ8ctSmHVPnXTkEW1Bj5qo_sSy3eY1HmWhVWdkh9Hl0IcbsB5i-n-_3BRdiQIcWXvg-ZHO5LO3qSEyUF8Qxkh3MgwRMdqZZRcHKbpbXAO1tjT48RaJThQZ5Qkh4wX2wmxKykeaA-8bjTZQKXCunYs9a6BkI24udvEccNpYvGQoXaDUPFsdM65R00r_Kf3EdUI5TwzIaGDDJPy_gGfTy_rcOw2shVVGcFPGpe7lhp1B-vrzY_n9j2rLfkbRZNwmcDxNpxDBUFwL8XUDwdi1G2cnNDP_aswnm0SNIdzLe6xqtNh3qobpZJqQjKxONNrYoAfdeXc0n1LpouLix_yrEIVmZcuFAtSa0raCrn2Dt_60SkzcfFRxeNc_uegcQx95w6pXlCN--jnbKpjRFppVV3pn0tMATvGKgb75IunywG_ZOEM7xNBgwNzUCxQeadiJCt9pc00u3V5NDT0Dz5vrm2ovzDbrlw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "178ce5b4-9af0-4633-9043-c6233b27675b", "record_id": "flaws_cloudtrail:0000132:178ce5b4-9af0-4633-9043-c6233b27675b", "row_index": 132, "timestamp": "2018-04-18T03:44:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "178ce5b4-9af0-4633-9043-c6233b27675b", "eventTime": "2018-04-18T03:44:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01c6e5b0-ea4f-4ed5-93bd-40d8a8dcf61e", "record_id": "flaws_cloudtrail:0000133:01c6e5b0-ea4f-4ed5-93bd-40d8a8dcf61e", "row_index": 133, "timestamp": "2018-04-18T03:44:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01c6e5b0-ea4f-4ed5-93bd-40d8a8dcf61e", "eventTime": "2018-04-18T03:44:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: jRqmKTrDi3BqWfCW-GF6EMnn4xScSCINwmMQvNcLRIgomCEG1WiVM3T17kwhVTiDdnckausn1UMPMWYk3FiH7lKLX6XCjcno4c5VEZMzg3ghTKxESZeItfmgUumwgGl4FF3F2-paeQ03tfxpuKxidGOkWrkXyswllnJlkj6x0pcPxEhEePbp3l8ObqsJxA4qTXfO99L-1sngNw2MFPlXhvd_BEeGrjl5DnI5YmIftiNPvtye9X1k08kGa6okDYtf22WhL03favam4B3NYyzIyajyHNewlD6mvagyqOUpDEON60VCuOzRaXLmX7pdlrYFT83OPWVeIRb6ml7tzvLnVykcHgALIAcGr1rh2s_oQ2IHVA5bPznc5jijf_X0gm1JTOcyOyLFuAtOwr00vCAE-QeColC3jKoy9RCdkhCv6YcmxB8QddlvT6tCS0YufM21w2TVfET118nVyJTNRXEyYhiH7FBIfBCqkDCajO3WFE_GFodpqS5biOXEJJoGxMrLg5t1Go-1rwWYYQQRaxf4wn1_XSVPh3sCIoJPaOpcuzWBkwOnkZs28kuH4fEYkkKgpx-Z5G8ViPOU2AkFr-mmg9wIaHc6mDlakCSxt9sYynkozCfkTN-FArU7lEFqONs0YgJrkENLqw3Ua3agrd0ewah4JYoIwWhPFhs", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88e0b793-95d0-4884-b86b-44513522e9b7", "record_id": "flaws_cloudtrail:0000134:88e0b793-95d0-4884-b86b-44513522e9b7", "row_index": 134, "timestamp": "2018-04-18T03:51:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88e0b793-95d0-4884-b86b-44513522e9b7", "eventTime": "2018-04-18T03:51:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a67eab75-0b85-4e9f-bbbf-e9309d177c6e", "record_id": "flaws_cloudtrail:0000135:a67eab75-0b85-4e9f-bbbf-e9309d177c6e", "row_index": 135, "timestamp": "2018-04-18T03:51:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a67eab75-0b85-4e9f-bbbf-e9309d177c6e", "eventTime": "2018-04-18T03:51:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e94f8df-374c-4db5-9741-2d196ff0d490", "record_id": "flaws_cloudtrail:0000136:6e94f8df-374c-4db5-9741-2d196ff0d490", "row_index": 136, "timestamp": "2018-04-18T03:51:08Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e94f8df-374c-4db5-9741-2d196ff0d490", "eventTime": "2018-04-18T03:51:08Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c585a3c-9dc4-4917-bf5d-491fe6b7858c", "record_id": "flaws_cloudtrail:0000137:0c585a3c-9dc4-4917-bf5d-491fe6b7858c", "row_index": 137, "timestamp": "2018-04-18T03:51:09Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c585a3c-9dc4-4917-bf5d-491fe6b7858c", "eventTime": "2018-04-18T03:51:09Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "458e2ea5-3391-4067-b853-54a70aa898181", "record_id": "flaws_cloudtrail:0000138:458e2ea5-3391-4067-b853-54a70aa898181", "row_index": 138, "timestamp": "2018-04-18T03:51:09Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "458e2ea5-3391-4067-b853-54a70aa898181", "eventTime": "2018-04-18T03:51:09Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc73716-d7ee-4eb3-8daa-4d03b287272f", "record_id": "flaws_cloudtrail:0000139:fc73716-d7ee-4eb3-8daa-4d03b287272f", "row_index": 139, "timestamp": "2018-04-18T03:51:09Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc73716-d7ee-4eb3-8daa-4d03b287272f", "eventTime": "2018-04-18T03:51:09Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e7f785a-bb7e-4ecf-9fff-785be2f5ae2d", "record_id": "flaws_cloudtrail:0000140:7e7f785a-bb7e-4ecf-9fff-785be2f5ae2d", "row_index": 140, "timestamp": "2018-04-18T03:51:09Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e7f785a-bb7e-4ecf-9fff-785be2f5ae2d", "eventTime": "2018-04-18T03:51:09Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "337527a91-36aa-41f9-af5e-0ceb55e013e8", "record_id": "flaws_cloudtrail:0000141:337527a91-36aa-41f9-af5e-0ceb55e013e8", "row_index": 141, "timestamp": "2018-04-18T03:51:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "337527a91-36aa-41f9-af5e-0ceb55e013e8", "eventTime": "2018-04-18T03:51:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd688fe6-77ee-44c4-b455-423aabf81dea", "record_id": "flaws_cloudtrail:0000142:dd688fe6-77ee-44c4-b455-423aabf81dea", "row_index": 142, "timestamp": "2018-04-18T03:51:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd688fe6-77ee-44c4-b455-423aabf81dea", "eventTime": "2018-04-18T03:51:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d60cbda-78a6-4a54-93b2-359324b3449", "record_id": "flaws_cloudtrail:0000143:1d60cbda-78a6-4a54-93b2-359324b3449", "row_index": 143, "timestamp": "2018-04-18T03:51:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d60cbda-78a6-4a54-93b2-359324b3449", "eventTime": "2018-04-18T03:51:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95062fa5-a0ab-4980-9cea-ae12b653d246", "record_id": "flaws_cloudtrail:0000144:95062fa5-a0ab-4980-9cea-ae12b653d246", "row_index": 144, "timestamp": "2018-04-18T03:51:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95062fa5-a0ab-4980-9cea-ae12b653d246", "eventTime": "2018-04-18T03:51:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d3c3e3f-02a9-4a6b-8443-f8d68c064cdb", "record_id": "flaws_cloudtrail:0000145:6d3c3e3f-02a9-4a6b-8443-f8d68c064cdb", "row_index": 145, "timestamp": "2018-04-18T03:51:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d3c3e3f-02a9-4a6b-8443-f8d68c064cdb", "eventTime": "2018-04-18T03:51:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "095229d-6d6b-417a-9130-63e7a0ca2fb9", "record_id": "flaws_cloudtrail:0000146:095229d-6d6b-417a-9130-63e7a0ca2fb9", "row_index": 146, "timestamp": "2018-04-18T03:51:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "095229d-6d6b-417a-9130-63e7a0ca2fb9", "eventTime": "2018-04-18T03:51:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b489337-a622-4f65-8977-134a9ed6302d", "record_id": "flaws_cloudtrail:0000147:0b489337-a622-4f65-8977-134a9ed6302d", "row_index": 147, "timestamp": "2018-04-18T03:51:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b489337-a622-4f65-8977-134a9ed6302d", "eventTime": "2018-04-18T03:51:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a9e8963-bd57-4e91-92db-2831490b50a2", "record_id": "flaws_cloudtrail:0000148:2a9e8963-bd57-4e91-92db-2831490b50a2", "row_index": 148, "timestamp": "2018-04-18T03:51:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a9e8963-bd57-4e91-92db-2831490b50a2", "eventTime": "2018-04-18T03:51:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a137adc-ae7f-47c0-b495-b3ea895959c0", "record_id": "flaws_cloudtrail:0000149:9a137adc-ae7f-47c0-b495-b3ea895959c0", "row_index": 149, "timestamp": "2018-04-18T03:51:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a137adc-ae7f-47c0-b495-b3ea895959c0", "eventTime": "2018-04-18T03:51:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66fdc86b-be40-4520-b186-ed118784e50", "record_id": "flaws_cloudtrail:0000150:66fdc86b-be40-4520-b186-ed118784e50", "row_index": 150, "timestamp": "2018-04-18T03:51:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66fdc86b-be40-4520-b186-ed118784e50", "eventTime": "2018-04-18T03:51:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35ce9ac6-97b2-497c-9178-713dc770f640", "record_id": "flaws_cloudtrail:0000151:35ce9ac6-97b2-497c-9178-713dc770f640", "row_index": 151, "timestamp": "2018-04-18T03:51:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35ce9ac6-97b2-497c-9178-713dc770f640", "eventTime": "2018-04-18T03:51:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c46027-fe71-42e2-b91b-fe5f9f3ec630", "record_id": "flaws_cloudtrail:0000152:3c46027-fe71-42e2-b91b-fe5f9f3ec630", "row_index": 152, "timestamp": "2018-04-18T03:51:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c46027-fe71-42e2-b91b-fe5f9f3ec630", "eventTime": "2018-04-18T03:51:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c8d2745-dac3-4a8a-b764-3d8e82a6fda2", "record_id": "flaws_cloudtrail:0000153:5c8d2745-dac3-4a8a-b764-3d8e82a6fda2", "row_index": 153, "timestamp": "2018-04-18T03:51:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c8d2745-dac3-4a8a-b764-3d8e82a6fda2", "eventTime": "2018-04-18T03:51:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e599671-19e0-4225-8e34-e59ee206df3c", "record_id": "flaws_cloudtrail:0000154:e599671-19e0-4225-8e34-e59ee206df3c", "row_index": 154, "timestamp": "2018-04-18T03:51:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e599671-19e0-4225-8e34-e59ee206df3c", "eventTime": "2018-04-18T03:51:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efac6fc8-47d3-4a2f-bebf-da6f22fa7800", "record_id": "flaws_cloudtrail:0000155:efac6fc8-47d3-4a2f-bebf-da6f22fa7800", "row_index": 155, "timestamp": "2018-04-18T03:51:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1279, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efac6fc8-47d3-4a2f-bebf-da6f22fa7800", "eventTime": "2018-04-18T03:51:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a4efd1a-6126-463d-aa6c-dae7db002786", "record_id": "flaws_cloudtrail:0000156:0a4efd1a-6126-463d-aa6c-dae7db002786", "row_index": 156, "timestamp": "2018-04-18T03:51:16Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a4efd1a-6126-463d-aa6c-dae7db002786", "eventTime": "2018-04-18T03:51:16Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df83b592-e876-4075-b9eb-775dca18ce39", "record_id": "flaws_cloudtrail:0000157:df83b592-e876-4075-b9eb-775dca18ce39", "row_index": 157, "timestamp": "2018-04-18T03:51:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df83b592-e876-4075-b9eb-775dca18ce39", "eventTime": "2018-04-18T03:51:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b89e9ca2-06a5-427d-8a00-6c4a4715a2dd", "record_id": "flaws_cloudtrail:0000158:b89e9ca2-06a5-427d-8a00-6c4a4715a2dd", "row_index": 158, "timestamp": "2018-04-18T03:51:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b89e9ca2-06a5-427d-8a00-6c4a4715a2dd", "eventTime": "2018-04-18T03:51:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f03da6e-1635-4ebc-bd2e-fb62a9c494d2", "record_id": "flaws_cloudtrail:0000159:4f03da6e-1635-4ebc-bd2e-fb62a9c494d2", "row_index": 159, "timestamp": "2018-04-18T03:51:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1169, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f03da6e-1635-4ebc-bd2e-fb62a9c494d2", "eventTime": "2018-04-18T03:51:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81f99dc6-32f9-4432-8630-8482dfff2c8b", "record_id": "flaws_cloudtrail:0000160:81f99dc6-32f9-4432-8630-8482dfff2c8b", "row_index": 160, "timestamp": "2018-04-18T03:51:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81f99dc6-32f9-4432-8630-8482dfff2c8b", "eventTime": "2018-04-18T03:51:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aac3ea8-1b92-40ba-a30f-6450c42752ab", "record_id": "flaws_cloudtrail:0000161:6aac3ea8-1b92-40ba-a30f-6450c42752ab", "row_index": 161, "timestamp": "2018-04-18T03:51:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aac3ea8-1b92-40ba-a30f-6450c42752ab", "eventTime": "2018-04-18T03:51:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b641de4-f0bb-4593-ac2e-52c28ff59f4f", "record_id": "flaws_cloudtrail:0000162:8b641de4-f0bb-4593-ac2e-52c28ff59f4f", "row_index": 162, "timestamp": "2018-04-18T03:51:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b641de4-f0bb-4593-ac2e-52c28ff59f4f", "eventTime": "2018-04-18T03:51:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29a805073-ca6a-45e1-9955-9cc54069ada", "record_id": "flaws_cloudtrail:0000163:29a805073-ca6a-45e1-9955-9cc54069ada", "row_index": 163, "timestamp": "2018-04-18T03:51:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1826, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29a805073-ca6a-45e1-9955-9cc54069ada", "eventTime": "2018-04-18T03:51:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 8YNMtU5-R2SAf3EdaIwnMIur9oYB_ekYH_1aaBbJTdk2KZMy67je1bUR0-Fm4AK5vOnKr46QLHMj3CxMseFIhcB3Ot1aWCIAXKuCia1kj9SAlpcd9FIvfnHgOnFluMvxcnmW325RSAfLPouPqGE39O1Msl9Cmc1U4Tle3EFwsUnjk7quetNQRd_96vK5LBXoemkafH9TpFbGd5kyF7Awyi9NSr_uOMRtin-7DP-SHboa5lnsEp0HD0mEv_EwYNiojJ2k2WU9aVwtAV5y8DsPk7EEr8UOI6XrspWxpkLyFlY6cdGj56mMaheS_QP60iiZFaeIukVVQukgCdb4ZzLpPLFVlUZBwC33eL3DtUzzzzMNMeocX_78YyylI69TBPjBOhgVjPPfBVU3GRnzApEZcBWlAUpAIgeeQCXuhSLtyy5y9l92quuaahxjL_iuNVfMmR1lqvkNerkZggtJLe9szHA1bEpLjiCu65B9xyRCQbKvz4pxrA0LXzfmhDFf8G-HJFRKyF_8FkqAR-dY4-41N3NsskHF0GhILCR49X9UT3hKk-ZkMMBVv4PP7HVp-Up8j_WH-_Gqas79uWL69h_UEFUaV1E1EjVbr36u3HHIXe-kvKnbn-Yjo_7x-g1Lne6P7zZreYZbrg2ubPnHBZrvn9AhUzjL2NoQpQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70aca716-5089-4b1a-b1c7-7cc858c415283", "record_id": "flaws_cloudtrail:0000164:70aca716-5089-4b1a-b1c7-7cc858c415283", "row_index": 164, "timestamp": "2018-04-18T03:51:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70aca716-5089-4b1a-b1c7-7cc858c415283", "eventTime": "2018-04-18T03:51:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63a8772f-4dc3-4045-a70b-8b444bf60b43", "record_id": "flaws_cloudtrail:0000165:63a8772f-4dc3-4045-a70b-8b444bf60b43", "row_index": 165, "timestamp": "2018-04-18T03:51:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63a8772f-4dc3-4045-a70b-8b444bf60b43", "eventTime": "2018-04-18T03:51:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "668d5453-9bcf-4bfb-98c3-75cea683d0c5", "record_id": "flaws_cloudtrail:0000166:668d5453-9bcf-4bfb-98c3-75cea683d0c5", "row_index": 166, "timestamp": "2018-04-18T03:51:20Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "668d5453-9bcf-4bfb-98c3-75cea683d0c5", "eventTime": "2018-04-18T03:51:20Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f763dc61-9c25-4cfc-827d-b21521e0d27a", "record_id": "flaws_cloudtrail:0000167:f763dc61-9c25-4cfc-827d-b21521e0d27a", "row_index": 167, "timestamp": "2018-04-18T03:51:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f763dc61-9c25-4cfc-827d-b21521e0d27a", "eventTime": "2018-04-18T03:51:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a097856-8cd7-4a67-83ec-696c12e4913d", "record_id": "flaws_cloudtrail:0000168:7a097856-8cd7-4a67-83ec-696c12e4913d", "row_index": 168, "timestamp": "2018-04-18T03:51:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a097856-8cd7-4a67-83ec-696c12e4913d", "eventTime": "2018-04-18T03:51:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: NcANu77NXZ4TxjOllhIgmKhMoY9P8ELwLxOMOz68-s9TRTOcto5kEJ1X5HRZqMhai2Ja6g8Cwo3n3odzR-Zg4GsbCz8bxk4Z5MhIshjbT2wG7xHTfgZvN7SjdbRaqzfAKklYEgsqXUxCtjeFlJ09nyY7WtiUWVDlzvDYrNoOXTjtxztpAjZcDYE4uT_262cVEmfyQHM2mDdGE-kBuJWA_oS_9MTdziKRfzyqHNVhleH7sJmElVn6vZRqZQnTqjN_0zNb1K91v_ezQOU7OBuoIBGrUgBSpXIO9gEJycZ7Q4Or5dbMWfATYJ0dH8N3KVxxJ_TSrVgD34KCh6KfyYOKEa6jbqOA5DvwYg6C-IyYdNJYQt_xIkcFOdUDcwsy2a5HPX22m5V8aAn5z4baP8HQh5NhwNPoCE9daIfYHowPQB7L5zahpPF76SUzZXis2IGlFsrCxCVWKghk-C35QPb3CMmVi_c97UCPCXP-8zIij-XY6MV-QY-0PjjTKY-i6DfqT6pVnvpjBUQqNO0OzMPOB6yrTvnk_25VA28tF9lS-cWHbTpe_GbHtUA-W_T6v9G-2Qx1ceZBkuncRcOL97Z4ka1F6vO_r4FnB1lATH8xn4olECCQDuAiRymqRHseXFUrdDwybVencPvv4VXQ8QhsZGryDjKnf_4Tnw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "135a2def-b992-4e24-aa81-414133ee47b4f", "record_id": "flaws_cloudtrail:0000169:135a2def-b992-4e24-aa81-414133ee47b4f", "row_index": 169, "timestamp": "2018-04-18T03:51:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "135a2def-b992-4e24-aa81-414133ee47b4f", "eventTime": "2018-04-18T03:51:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9920c6d9-3b02-4363-8141-7a30c82ce1c1", "record_id": "flaws_cloudtrail:0000170:9920c6d9-3b02-4363-8141-7a30c82ce1c1", "row_index": 170, "timestamp": "2018-04-18T03:51:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9920c6d9-3b02-4363-8141-7a30c82ce1c1", "eventTime": "2018-04-18T03:51:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb6a9f8e-2e3e-4bad-a3ac-624552df01b0", "record_id": "flaws_cloudtrail:0000171:fb6a9f8e-2e3e-4bad-a3ac-624552df01b0", "row_index": 171, "timestamp": "2018-04-18T03:51:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb6a9f8e-2e3e-4bad-a3ac-624552df01b0", "eventTime": "2018-04-18T03:51:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96d6ae72-aa9c-47cd-b24c-238c190ddb75", "record_id": "flaws_cloudtrail:0000172:96d6ae72-aa9c-47cd-b24c-238c190ddb75", "row_index": 172, "timestamp": "2018-04-18T03:51:22Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96d6ae72-aa9c-47cd-b24c-238c190ddb75", "eventTime": "2018-04-18T03:51:22Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21d032043-caf1-42a5-8b99-54e784368f6a", "record_id": "flaws_cloudtrail:0000173:21d032043-caf1-42a5-8b99-54e784368f6a", "row_index": 173, "timestamp": "2018-04-18T03:51:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21d032043-caf1-42a5-8b99-54e784368f6a", "eventTime": "2018-04-18T03:51:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c675807-f6b2-448a-a62d-9e2f58a44cc1", "record_id": "flaws_cloudtrail:0000174:5c675807-f6b2-448a-a62d-9e2f58a44cc1", "row_index": 174, "timestamp": "2018-04-18T03:51:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c675807-f6b2-448a-a62d-9e2f58a44cc1", "eventTime": "2018-04-18T03:51:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: v87pBOtPOTlaCIIXP92mddh1ma4RiN3gnuDDJ8M9pQCmE-feSuSU-JdT2VmQJyJze3TaSWTiP4biCipbc8jEc6VzQsIZV_gnGNnMCpi4b835wwzRcDf8-DImsut_R1-JPt8NcMMSQ_2r24_O8L31gnQsOBdR8UO5XV18WvDKpaXw8wRfXS_vRxNAQ-_YgTOrcl3CM5JzuR9_kaKfXp1hJy8nrrzz6CCvDQpmYH6jP84pmFFKmnhNTLHwvAjk-fAVxeWE9phbpA9m-DY03bEOK6SdkYClNCgvFRala0rTY8g5EEPIjggKoRQDsr8UaLcYKKSwIKMv0V4VeznDNMT5nzqprEeOMuFY8drXOHxYPGNpF-RZIcqZhdBk_ZOkMRE4YvX2a2ZdHUOQHUgFoS8i68tSF1Rx6YqYT-zpfHBneku6feaoEJt6nmInWNIgjc5JShUoccKuHp3BP0_EPEEPt7JDoFk2ktrD1Q4wpl01EaZkmWYKnFQomMSPgY-1tVAnJl_q2h3BrK-XVNz83Wb8cc5QLHJOnikrGeRo9MAduPFxdHzRtN7EGPj2uVRvDrmsCMxKhMiwtezPlM7HisMqUgywY1bHVrtE9WcTbiyQiQkcn82Qf6VieRawwvXfk_jIo50yrEn8uBPmJn4CYlFEp0VlCye3D6MgHggkGEAk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bf0b268-0781-44b7-91ff-349616fa9ae1", "record_id": "flaws_cloudtrail:0000175:5bf0b268-0781-44b7-91ff-349616fa9ae1", "row_index": 175, "timestamp": "2018-04-18T03:51:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1836, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bf0b268-0781-44b7-91ff-349616fa9ae1", "eventTime": "2018-04-18T03:51:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ZgWH2ls77Kv3HHV6hXPugyKkoAhTLW0fdnUfoI1DMokIYI_Qoe119tJaFH9lvxgmwOWLzmw9hiEpMImEIhAK_FbQ0zesBimstGDlI5mvwlvVbWCSFRcRuZdp9qCrNzsVcRnRKsUM_LjMPFZh-syWjzUHUa8MxFVQN2rQnqW38SYRKo3TQJoS-y47rWd9CyS6F6mSjBpfm1xnJEO6hzJuEVwl-hbRJ9A7dT2EtbZxvELHiuKv3XyKp8DEeehia28X53IEXrypYcNsZNbGF-5g8uIsJZjKHPuN4Ya6GC8wU1TvO1Kp_zA-gRsHxfE5ETnAOmqXr9cGsMrOz5lptQMkDOuJSq2Fn-HTwpgQpBxbLehWivQnmXOIQeOF1IOiItpwR5-JISWwKvuX3ZTnojnRcU2ZHwN0Kjz6qYn5L1_LDP_8ziZa_K8G89hH0HsBO0mMal7tnI_YwwZfNqh5VdkA4uLSitzFTRQv3G7XEKkxGwyFJka-PG2Pbi_NSixR9_yE6D1ydQjeEAffeSMJ3PTiZbjtnzxQ7dPKzHs1JUN3hxqcflUBdIp5KkTVzgVTxcbor7FLlkgYqTTFq-7xM3CP81q2vD1YycAImtABTZw3SqeLtyg1r_V1kw-V8lF7v6ZYURwUW4iNZFE3G1FTMoaMQecA-PISwjyW5B2l_cE", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bab35a1e-8960-4b40-a282-ce1f8f660b72", "record_id": "flaws_cloudtrail:0000176:bab35a1e-8960-4b40-a282-ce1f8f660b72", "row_index": 176, "timestamp": "2018-04-18T03:51:24Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bab35a1e-8960-4b40-a282-ce1f8f660b72", "eventTime": "2018-04-18T03:51:24Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7917e5d3-3614-4a26-967d-781f8bc86fff", "record_id": "flaws_cloudtrail:0000177:7917e5d3-3614-4a26-967d-781f8bc86fff", "row_index": 177, "timestamp": "2018-04-18T03:51:24Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7917e5d3-3614-4a26-967d-781f8bc86fff", "eventTime": "2018-04-18T03:51:24Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "462b19f1-11c3-47e4-addc-f98bf8766156", "record_id": "flaws_cloudtrail:0000178:462b19f1-11c3-47e4-addc-f98bf8766156", "row_index": 178, "timestamp": "2018-04-18T03:51:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1172, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "462b19f1-11c3-47e4-addc-f98bf8766156", "eventTime": "2018-04-18T03:51:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39f99a77-356a-4fc8-a8c0-2bb9a758130f1", "record_id": "flaws_cloudtrail:0000179:39f99a77-356a-4fc8-a8c0-2bb9a758130f1", "row_index": 179, "timestamp": "2018-04-18T03:51:25Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39f99a77-356a-4fc8-a8c0-2bb9a758130f1", "eventTime": "2018-04-18T03:51:25Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70e7bdd3-16ec-4d66-977e-35ffd0b382ed", "record_id": "flaws_cloudtrail:0000180:70e7bdd3-16ec-4d66-977e-35ffd0b382ed", "row_index": 180, "timestamp": "2018-04-18T03:51:25Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70e7bdd3-16ec-4d66-977e-35ffd0b382ed", "eventTime": "2018-04-18T03:51:25Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e645f5f6-ad0c-4b78-b167-c5308d391dec", "record_id": "flaws_cloudtrail:0000181:e645f5f6-ad0c-4b78-b167-c5308d391dec", "row_index": 181, "timestamp": "2018-04-18T03:51:26Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e645f5f6-ad0c-4b78-b167-c5308d391dec", "eventTime": "2018-04-18T03:51:26Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "928aaaa3-3dfb-4f7e-97c1-17caa98ad8fd", "record_id": "flaws_cloudtrail:0000182:928aaaa3-3dfb-4f7e-97c1-17caa98ad8fd", "row_index": 182, "timestamp": "2018-04-18T03:51:26Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "928aaaa3-3dfb-4f7e-97c1-17caa98ad8fd", "eventTime": "2018-04-18T03:51:26Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12a92a0a-00c2-432f-8eee-6a6ec732d48f", "record_id": "flaws_cloudtrail:0000183:12a92a0a-00c2-432f-8eee-6a6ec732d48f", "row_index": 183, "timestamp": "2018-04-18T03:51:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12a92a0a-00c2-432f-8eee-6a6ec732d48f", "eventTime": "2018-04-18T03:51:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: F8x_OcRSZgq3UEGY7ySO4cqjlRdOJfAIYlB2oiNj55ZcAo4t6pT3-zO9wDgXscJZUo9CQPKVx0gIqBjJjrt5hb_LHde9GkBLB44jF7Xn_bGK4dhY5CsmAiURZdQF5eUCWZtMOz6sqDHGgu7yC5gbw7zP1BX6GrLMPjLGjsqKwK3dsRMdlVoqsJakWAGvNWdHDfaP6KcqXHJtLTYRHSG04J8fv6w8DGkl9ONm0Zl_OWl-8_KqFi9ayUOGzXoTbWMoc-XKco68gLrZGOqeRLoS0pX4xEjhs4c8QzBgFyybV9gPbiAXpkWxOzvYQdeIiiW2Gh1xhhekSEBEJJMGGVXfVz-k-O53cXLC8X3MCKg4vUx8G4UBrMfst0u9L0Xj4xTSLPyILVIcej1mq-euB8xx-OxE3TZQgdytKLz31mYbAk7YqvGIdrdnK_g1Ojpaz39qfB-0jk0van1AwvQQmVoO2QEJkWfFP31WRfnMssBaop9kmU7c8fXtu3k3oJPm5tqUDj62IBS6hu272NoK5FV1Ba61-84uvXXfgVB4Gm4-9pUkZ6Fq_d9nefXS-ZkH1wksZGA4kcqSZRuwHNXPZ1ppASKbiXxtFFw21cyqUpGke0Q6DzK782Kb3PRFnhLtPb9Wdf5ZWeNQa-Yv9RielbXMWAecAJWc0bVkJA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26dcc231-df7d-4a07-952d-9c26f3b6a3f5", "record_id": "flaws_cloudtrail:0000184:26dcc231-df7d-4a07-952d-9c26f3b6a3f5", "row_index": 184, "timestamp": "2018-04-18T03:51:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26dcc231-df7d-4a07-952d-9c26f3b6a3f5", "eventTime": "2018-04-18T03:51:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "198870-02a1-4833-843c-546cff94be9d", "record_id": "flaws_cloudtrail:0000185:198870-02a1-4833-843c-546cff94be9d", "row_index": 185, "timestamp": "2018-04-18T03:51:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "198870-02a1-4833-843c-546cff94be9d", "eventTime": "2018-04-18T03:51:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7c2dda0-bb8d-4cc4-9cfd-adaeba761873", "record_id": "flaws_cloudtrail:0000186:b7c2dda0-bb8d-4cc4-9cfd-adaeba761873", "row_index": 186, "timestamp": "2018-04-18T03:51:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7c2dda0-bb8d-4cc4-9cfd-adaeba761873", "eventTime": "2018-04-18T03:51:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65e8bdde-4b98-4f11-91d8-dc6ee113c1ea", "record_id": "flaws_cloudtrail:0000187:65e8bdde-4b98-4f11-91d8-dc6ee113c1ea", "row_index": 187, "timestamp": "2018-04-18T03:51:28Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65e8bdde-4b98-4f11-91d8-dc6ee113c1ea", "eventTime": "2018-04-18T03:51:28Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d820e07-d71b-46b4-b17d-d13b7ce5968c", "record_id": "flaws_cloudtrail:0000188:4d820e07-d71b-46b4-b17d-d13b7ce5968c", "row_index": 188, "timestamp": "2018-04-18T03:51:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d820e07-d71b-46b4-b17d-d13b7ce5968c", "eventTime": "2018-04-18T03:51:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3298d4b-64ec-4245-b796-df8f939727fe", "record_id": "flaws_cloudtrail:0000189:e3298d4b-64ec-4245-b796-df8f939727fe", "row_index": 189, "timestamp": "2018-04-18T03:51:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3298d4b-64ec-4245-b796-df8f939727fe", "eventTime": "2018-04-18T03:51:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbb42bbd-1ebc-4214-a3d5-d5657fc79d5e", "record_id": "flaws_cloudtrail:0000190:dbb42bbd-1ebc-4214-a3d5-d5657fc79d5e", "row_index": 190, "timestamp": "2018-04-18T03:51:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbb42bbd-1ebc-4214-a3d5-d5657fc79d5e", "eventTime": "2018-04-18T03:51:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "036c119b-9b82-4a98-8205-476727e34", "record_id": "flaws_cloudtrail:0000191:036c119b-9b82-4a98-8205-476727e34", "row_index": 191, "timestamp": "2018-04-18T03:51:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "036c119b-9b82-4a98-8205-476727e34", "eventTime": "2018-04-18T03:51:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a69fc5bb-b5b2-4c98-a131-1032ee2d085b", "record_id": "flaws_cloudtrail:0000192:a69fc5bb-b5b2-4c98-a131-1032ee2d085b", "row_index": 192, "timestamp": "2018-04-18T03:51:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a69fc5bb-b5b2-4c98-a131-1032ee2d085b", "eventTime": "2018-04-18T03:51:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "995e6fc0-3b83-4bcb-acd5-8020d315c824", "record_id": "flaws_cloudtrail:0000193:995e6fc0-3b83-4bcb-acd5-8020d315c824", "row_index": 193, "timestamp": "2018-04-18T03:51:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "995e6fc0-3b83-4bcb-acd5-8020d315c824", "eventTime": "2018-04-18T03:51:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57b88152-71e8-40c6-9913-5ffb2f6f7913", "record_id": "flaws_cloudtrail:0000194:57b88152-71e8-40c6-9913-5ffb2f6f7913", "row_index": 194, "timestamp": "2018-04-18T03:51:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1836, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57b88152-71e8-40c6-9913-5ffb2f6f7913", "eventTime": "2018-04-18T03:51:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 4-oW-EeBIyRiJibnl9cpAvfSvFV53iLSb55k5BdBscZNHFIzLnKI4MNQOGGrVLzjfwDeFTEHJbva1_H1IRcFsWQbhglz90t177RIK3MxSLF4KmEQ21OZgpbWe0g6g-R_yzS88wlzj3oPuCYv2YIjhdSnWUsXY_K_yySQj83jS-CSEPmqqYoh0y4MWB-HXHSU1viZgB6Qhrcb1eH0fIjaPNHqRZBq4qhokA7dr9k78o4X2fAyvuoDc-if926stpvurj3MXl7yhVpkuJLHq33jd7mIrxlnjwS25ALdqmuTKYQtW0OiaBdWvBM3-GJAlr7fpl17NZ3qx3r_CV81my3974dif7USMqYBeXhPhBoQ37WInrKI2AuKWoE5NckkpDCjUP0vSGEGzrubPdr-x2MAVCHiPuM8n7nMwJk34xLF997JRDZLn49mtMgR26o6_sO8jF1hyEY1A0YFdHOYhpCClAAfXKIKYjcs67CeFYpa4gAJwj-8r2EfwSeo9W4lcq8GDS-GwzfcBR-RlzAw2V9t3V8Pkx8Zg9D0wkcnDRWqJtSobt9RnssZkV8YWu5oETJXcxdV93Qcqm47sC0-kFKDgoeacjk85tF9-hZKGo1S3BleGNWxTPSTR9w5HAoAZYSnNnMDnMe6THTA4EAE5ZvHMzzJHCB3ojjTlzC9_XM", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1cfce14-807a-4f65-afb1-d18c18ca3179", "record_id": "flaws_cloudtrail:0000195:d1cfce14-807a-4f65-afb1-d18c18ca3179", "row_index": 195, "timestamp": "2018-04-18T03:51:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1cfce14-807a-4f65-afb1-d18c18ca3179", "eventTime": "2018-04-18T03:51:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c68da9e-37ad-474a-b68e-094421efcd98", "record_id": "flaws_cloudtrail:0000196:7c68da9e-37ad-474a-b68e-094421efcd98", "row_index": 196, "timestamp": "2018-04-18T03:51:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c68da9e-37ad-474a-b68e-094421efcd98", "eventTime": "2018-04-18T03:51:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "198d613a-2499-4cb0-a6aa-84c30c475dd6", "record_id": "flaws_cloudtrail:0000197:198d613a-2499-4cb0-a6aa-84c30c475dd6", "row_index": 197, "timestamp": "2018-04-18T03:51:32Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "198d613a-2499-4cb0-a6aa-84c30c475dd6", "eventTime": "2018-04-18T03:51:32Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b56b0b5-64bb-4d26-87b6-bbc63c9a3926", "record_id": "flaws_cloudtrail:0000198:4b56b0b5-64bb-4d26-87b6-bbc63c9a3926", "row_index": 198, "timestamp": "2018-04-18T03:51:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b56b0b5-64bb-4d26-87b6-bbc63c9a3926", "eventTime": "2018-04-18T03:51:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c432bd2f-928f-4dee-9176-aedc7c3be65d", "record_id": "flaws_cloudtrail:0000199:c432bd2f-928f-4dee-9176-aedc7c3be65d", "row_index": 199, "timestamp": "2018-04-18T03:51:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c432bd2f-928f-4dee-9176-aedc7c3be65d", "eventTime": "2018-04-18T03:51:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d20fd33-9522-4eb2-8537-d03695bb70c", "record_id": "flaws_cloudtrail:0000200:5d20fd33-9522-4eb2-8537-d03695bb70c", "row_index": 200, "timestamp": "2018-04-18T03:51:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d20fd33-9522-4eb2-8537-d03695bb70c", "eventTime": "2018-04-18T03:51:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be419fa4-9c3a-44e8-b8ee-9d54cb57de30", "record_id": "flaws_cloudtrail:0000201:be419fa4-9c3a-44e8-b8ee-9d54cb57de30", "row_index": 201, "timestamp": "2018-04-18T03:51:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be419fa4-9c3a-44e8-b8ee-9d54cb57de30", "eventTime": "2018-04-18T03:51:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "356f84fc-25f9-4495-9e13-1f4b20bb7ccd", "record_id": "flaws_cloudtrail:0000202:356f84fc-25f9-4495-9e13-1f4b20bb7ccd", "row_index": 202, "timestamp": "2018-04-18T03:51:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1173, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "356f84fc-25f9-4495-9e13-1f4b20bb7ccd", "eventTime": "2018-04-18T03:51:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62fc009b-3c60-4f6d-ab68-5788e4c01f20", "record_id": "flaws_cloudtrail:0000203:62fc009b-3c60-4f6d-ab68-5788e4c01f20", "row_index": 203, "timestamp": "2018-04-18T03:51:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62fc009b-3c60-4f6d-ab68-5788e4c01f20", "eventTime": "2018-04-18T03:51:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d938dc14-c1bb-465c-b10c-215068a7ee15", "record_id": "flaws_cloudtrail:0000204:d938dc14-c1bb-465c-b10c-215068a7ee15", "row_index": 204, "timestamp": "2018-04-18T03:51:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1832, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d938dc14-c1bb-465c-b10c-215068a7ee15", "eventTime": "2018-04-18T03:51:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: YfSsXFNz4BN_nUryayRzwQLwEvAFrCtxgkHN-tR7QVSdRzwUMcjMm0ygrJ2K13Vdnxru2CFsUq8zcRGX-LkXVoG9_0ofLOYKPh4CovVRO3YoNiAbgphmHUkKZJQCHJo-64j-wkfFFBlguFRXknZmOvAMUOBlRdxDBaRBZkbp03dUd226hrMYy__1CawR4wyiemyz61X1YsL0Wc2zdryeTgbVHnkKNw1dhUWMWNeW5qb6IJhs22nswXxChma7u85mm-iOb_P0rTKp1XYeuryoQ3b-_c-UO3nxyN_Lxk8qdykVUholHS8uWkJ-axs-GHop7bM8eSPpsNz8N_CprOwQj2cNvZ_8a-uqakq5wzc_1xxXBo1M7g9KAudCU_GvSLG5E9QihCWWuRdoZloEvFmD0YTZ4w5crxtte60PdarcQi9BxiGc-FfQVWJ2FWuLafyx-9s-9ho0gQkKmSKuwLsgGwrU0H9ZP5K3PgFLbic2mbYIwJ9KQv_cWlZwttBzES9FH7bupKQE85QvYBWgiQ4Nvf4mYTBnAZxTuK78dUgMuWkIyb9IHgee7o8Nmj6VOmWdSHhhGNs8R-Sx0ALNIhhlMvkDrKD0aQhZYuyMsS33qqOSlK25qeRAFjs25k78atqm39VHpQuUBR3XAiGDKnyogP82jsh-Hh4PKQ81", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4ce9ceb-600d-4299-95fc-c3c34a24a2c9", "record_id": "flaws_cloudtrail:0000205:f4ce9ceb-600d-4299-95fc-c3c34a24a2c9", "row_index": 205, "timestamp": "2018-04-18T03:51:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4ce9ceb-600d-4299-95fc-c3c34a24a2c9", "eventTime": "2018-04-18T03:51:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec80dd3b-1d19-4150-8e01-f5f47e4245ce", "record_id": "flaws_cloudtrail:0000206:ec80dd3b-1d19-4150-8e01-f5f47e4245ce", "row_index": 206, "timestamp": "2018-04-18T03:51:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec80dd3b-1d19-4150-8e01-f5f47e4245ce", "eventTime": "2018-04-18T03:51:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64b28256-8c63-4184-a850-b351136b2", "record_id": "flaws_cloudtrail:0000207:64b28256-8c63-4184-a850-b351136b2", "row_index": 207, "timestamp": "2018-04-18T03:51:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1279, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64b28256-8c63-4184-a850-b351136b2", "eventTime": "2018-04-18T03:51:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c9f9fa1-bccf-4768-8cbb-537178471c17", "record_id": "flaws_cloudtrail:0000208:0c9f9fa1-bccf-4768-8cbb-537178471c17", "row_index": 208, "timestamp": "2018-04-18T03:51:36Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c9f9fa1-bccf-4768-8cbb-537178471c17", "eventTime": "2018-04-18T03:51:36Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf0fc930-477f-4367-bbd6-b29cea0e294b", "record_id": "flaws_cloudtrail:0000209:cf0fc930-477f-4367-bbd6-b29cea0e294b", "row_index": 209, "timestamp": "2018-04-18T03:51:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf0fc930-477f-4367-bbd6-b29cea0e294b", "eventTime": "2018-04-18T03:51:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b52243d-1b04-4853-af7b-3c6158f95683", "record_id": "flaws_cloudtrail:0000210:b52243d-1b04-4853-af7b-3c6158f95683", "row_index": 210, "timestamp": "2018-04-18T03:51:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1273, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b52243d-1b04-4853-af7b-3c6158f95683", "eventTime": "2018-04-18T03:51:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3d09dcf-264e-44cb-a0d0-a1cb1ebb2f03", "record_id": "flaws_cloudtrail:0000211:e3d09dcf-264e-44cb-a0d0-a1cb1ebb2f03", "row_index": 211, "timestamp": "2018-04-18T03:51:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3d09dcf-264e-44cb-a0d0-a1cb1ebb2f03", "eventTime": "2018-04-18T03:51:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08095-91e0-4166-9b50-c7fb3f9a4bd9", "record_id": "flaws_cloudtrail:0000212:08095-91e0-4166-9b50-c7fb3f9a4bd9", "row_index": 212, "timestamp": "2018-04-18T03:51:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1270, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08095-91e0-4166-9b50-c7fb3f9a4bd9", "eventTime": "2018-04-18T03:51:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebdd1cb2-6570-4e7a-bc9f-2ed468ef04a9", "record_id": "flaws_cloudtrail:0000213:ebdd1cb2-6570-4e7a-bc9f-2ed468ef04a9", "row_index": 213, "timestamp": "2018-04-18T03:51:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebdd1cb2-6570-4e7a-bc9f-2ed468ef04a9", "eventTime": "2018-04-18T03:51:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: QfPJ1EhdD8AhcwZ8dl3DkUDwCR4H8eRN95LpygjgwCSqJ6Y9bO3XwDvXd8Owq8aCjgJtEeL_BrGU-M0WPZ9aBYcv79fMSPilh2t3M2R3Z4OF3aVIaTgUYzbDequmB-COuSeGbuxvanZuFlWvHqFGPJvCTNkzIqMzpZ8JJvNOK4LvP1oIswjmTXLdMH85orUomFTFnL305UOcXnp-o1gfksBbnojj4HJxsUEvy5wB8Ab1l6TCFr4zSDGJoB1w7bexVezo5qC0quERUf7m685ogE3mrF0l2SNrwN67Bb7fPgJp4_rLzTOTNMxHlDW2wehLyS3y1tkAJbAMeyNL8fWUn2Hge6dFbHhQG5fdC8FmEW_YxcML3uGZqNR-3uimmTyQXQVNIqEvzAtFUuUUIyu8uk8-2mUp60yz5QGJrrUixbLOhsHFpfHAKOoSQp9GEoCLZZdCMA5rL0XERH0x6GQEXk_OrIo4G-LrV0msnF9N2JonVm67-f5PPg-9BRSpvGxnLxuhS8xGJZqLGPbmb3vKPmaXhdH1BxUBvQ7llLCbEzrrsDjdG3lqqsrZo_1lFXN0noCm7x_1w3R7yJqORfmT_ZHgi_kwSm5OmH6xc6gukqpOLI-Pi_Duh22VL13E4U179CfTaEHoWMLFRTl7blc9BZmezoOQhg4jkE8", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "991767d3-92f3-49f6-8953-5a18a5ae0585", "record_id": "flaws_cloudtrail:0000214:991767d3-92f3-49f6-8953-5a18a5ae0585", "row_index": 214, "timestamp": "2018-04-18T03:51:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "991767d3-92f3-49f6-8953-5a18a5ae0585", "eventTime": "2018-04-18T03:51:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c6dc88e-58ec-4986-9391-e34a584152cd", "record_id": "flaws_cloudtrail:0000215:8c6dc88e-58ec-4986-9391-e34a584152cd", "row_index": 215, "timestamp": "2018-04-18T03:51:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c6dc88e-58ec-4986-9391-e34a584152cd", "eventTime": "2018-04-18T03:51:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dea69ce5-f1f2-4da3-a81f-3224ac85d08a", "record_id": "flaws_cloudtrail:0000216:dea69ce5-f1f2-4da3-a81f-3224ac85d08a", "row_index": 216, "timestamp": "2018-04-18T03:51:38Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dea69ce5-f1f2-4da3-a81f-3224ac85d08a", "eventTime": "2018-04-18T03:51:38Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d62b798d-6849-4d9e-b334-224d24fe41d7", "record_id": "flaws_cloudtrail:0000217:d62b798d-6849-4d9e-b334-224d24fe41d7", "row_index": 217, "timestamp": "2018-04-18T03:51:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d62b798d-6849-4d9e-b334-224d24fe41d7", "eventTime": "2018-04-18T03:51:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "caf607943-3f9c-4d14-947f-260b1f4a69af", "record_id": "flaws_cloudtrail:0000218:caf607943-3f9c-4d14-947f-260b1f4a69af", "row_index": 218, "timestamp": "2018-04-18T03:51:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "caf607943-3f9c-4d14-947f-260b1f4a69af", "eventTime": "2018-04-18T03:51:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c4ec83f-755b-461e-87c2-3237d01c2d2b", "record_id": "flaws_cloudtrail:0000219:5c4ec83f-755b-461e-87c2-3237d01c2d2b", "row_index": 219, "timestamp": "2018-04-18T03:51:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c4ec83f-755b-461e-87c2-3237d01c2d2b", "eventTime": "2018-04-18T03:51:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60f1fcbe-c199-44b5-a482-1e028c6e91ac", "record_id": "flaws_cloudtrail:0000220:60f1fcbe-c199-44b5-a482-1e028c6e91ac", "row_index": 220, "timestamp": "2018-04-18T03:51:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60f1fcbe-c199-44b5-a482-1e028c6e91ac", "eventTime": "2018-04-18T03:51:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "344460f28-21a4-4f80-9d7b-0713246842e6", "record_id": "flaws_cloudtrail:0000221:344460f28-21a4-4f80-9d7b-0713246842e6", "row_index": 221, "timestamp": "2018-04-18T03:51:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "344460f28-21a4-4f80-9d7b-0713246842e6", "eventTime": "2018-04-18T03:51:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: _N9ayDm0MDMcUJ2QPMiW31Pv3JgRQxPWJBYhFjeMtgAoqKbj_DcuClfHS7-9Y_BHKjm6oyCEpnx68beQ4Gu4fXKCwXJtIM8suYf6445cwUojdcNkvnRYWvb0FJ0IpgfAMJdrpMKAgkDxTEQXTs0F4M_h-he-E6GPPJs1KDBKT16ddoz36DgN-hQQNgGq5DppPuOl1jJrrMvX3SZgDGU_m7DJ8790wVScHrjH3_tZbYgRGErJOwZJmeNBQplsI9I_aZ0Dy-W4a5n3vZk9FBKtUVbykrKCBo6DIcxCJ8pVcARs2-GHddvIylE4gCIm_9M2eVqbWh7Urvckz1l6v696PywEaCkGCLIuzV6g3VgVyet71EXJQ4CLDtNQXJ5eiR8y99F7_zPQsS8V8st9LTxYKKhoc0fbOnXVktNbNlAA35dy94-BRHJmWwOb02Nz7c2t-IKnxCL0yLzWZF1eNOAmubEKiJ45FVCUS8s88Xk6QmTEJqezlUu4mDd-Mx5nZ9-Hx7fmdCujQm7DLQ5Xv0ezLry9oW9pkvezlbHXjEF6moxAXZg3jar6xisfX-Ry4OaWWTDnI_SJy1Vj_nyjUTf86jrL86QttyEfCv9mJiqW5rPDcSCYcdoVCuyurZX3ZhSUlhgYHN1NFw43n3EnOup7JtpZlHYPRGPbiMjMrXk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8aff2eba-1b69-43b3-84bd-179849526130", "record_id": "flaws_cloudtrail:0000222:8aff2eba-1b69-43b3-84bd-179849526130", "row_index": 222, "timestamp": "2018-04-18T03:51:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8aff2eba-1b69-43b3-84bd-179849526130", "eventTime": "2018-04-18T03:51:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c9140fe-7416-41ca-9cf4-19b5a58c3ba5", "record_id": "flaws_cloudtrail:0000223:4c9140fe-7416-41ca-9cf4-19b5a58c3ba5", "row_index": 223, "timestamp": "2018-04-18T03:51:41Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1172, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c9140fe-7416-41ca-9cf4-19b5a58c3ba5", "eventTime": "2018-04-18T03:51:41Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0754b395-1097-4f97-ac2d-ff4071b81d99", "record_id": "flaws_cloudtrail:0000224:0754b395-1097-4f97-ac2d-ff4071b81d99", "row_index": 224, "timestamp": "2018-04-18T03:51:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0754b395-1097-4f97-ac2d-ff4071b81d99", "eventTime": "2018-04-18T03:51:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c103617a6-c985-4caf-8e9e-4c8e58bd1478", "record_id": "flaws_cloudtrail:0000225:c103617a6-c985-4caf-8e9e-4c8e58bd1478", "row_index": 225, "timestamp": "2018-04-18T03:51:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c103617a6-c985-4caf-8e9e-4c8e58bd1478", "eventTime": "2018-04-18T03:51:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad20d62a-48c2-4261-9708-c5b5e0dd598a", "record_id": "flaws_cloudtrail:0000226:ad20d62a-48c2-4261-9708-c5b5e0dd598a", "row_index": 226, "timestamp": "2018-04-18T03:51:42Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad20d62a-48c2-4261-9708-c5b5e0dd598a", "eventTime": "2018-04-18T03:51:42Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7096b30f-a190-43d8-b80d-f6385a043868", "record_id": "flaws_cloudtrail:0000227:7096b30f-a190-43d8-b80d-f6385a043868", "row_index": 227, "timestamp": "2018-04-18T03:51:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7096b30f-a190-43d8-b80d-f6385a043868", "eventTime": "2018-04-18T03:51:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bca42a40-37d2-49d1-895b-82eed0f547bf", "record_id": "flaws_cloudtrail:0000228:bca42a40-37d2-49d1-895b-82eed0f547bf", "row_index": 228, "timestamp": "2018-04-18T03:51:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bca42a40-37d2-49d1-895b-82eed0f547bf", "eventTime": "2018-04-18T03:51:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11497be-81fd-4db7-9c39-116ddeff536b", "record_id": "flaws_cloudtrail:0000229:11497be-81fd-4db7-9c39-116ddeff536b", "row_index": 229, "timestamp": "2018-04-18T03:51:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11497be-81fd-4db7-9c39-116ddeff536b", "eventTime": "2018-04-18T03:51:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c66bcee6-d910-48a8-8ef5-2fe80f359b53", "record_id": "flaws_cloudtrail:0000230:c66bcee6-d910-48a8-8ef5-2fe80f359b53", "row_index": 230, "timestamp": "2018-04-18T03:51:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1172, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c66bcee6-d910-48a8-8ef5-2fe80f359b53", "eventTime": "2018-04-18T03:51:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b08bd0f6-b062-483d-a970-f483522afd4b", "record_id": "flaws_cloudtrail:0000231:b08bd0f6-b062-483d-a970-f483522afd4b", "row_index": 231, "timestamp": "2018-04-18T03:51:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b08bd0f6-b062-483d-a970-f483522afd4b", "eventTime": "2018-04-18T03:51:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32101c6b-451a-42ea-b548-e1578c01e549", "record_id": "flaws_cloudtrail:0000232:32101c6b-451a-42ea-b548-e1578c01e549", "row_index": 232, "timestamp": "2018-04-18T03:51:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32101c6b-451a-42ea-b548-e1578c01e549", "eventTime": "2018-04-18T03:51:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69b05b6c-208f-4744-9a89-400d23a4fa7f", "record_id": "flaws_cloudtrail:0000233:69b05b6c-208f-4744-9a89-400d23a4fa7f", "row_index": 233, "timestamp": "2018-04-18T03:51:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1826, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69b05b6c-208f-4744-9a89-400d23a4fa7f", "eventTime": "2018-04-18T03:51:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 4FZcadllGEie3nYc4EiYwGW-EnLi6pHOECAuGq-9CR56XXsPYIEmVnFOrIyPbfki0AofWohqCvtGGg_TWUT3pD_SlehKC9dwwb5socpC49ca4eI2KoOsJbGNQaMgFUQXMS7Dzj5w_rCDgLSsa2m10i-TfwrT1pjY_k-MX_4sRCdVYjx9AkVUWOCabKnAHDai1FV7SeW_-vuzh42bvx2gxKeAOD-O2moT7tQNPH_gzWV7O6Osuu3GBXKzy4hO6bcsxJtySXPGm-SK-4Uo8PItbyU3Sa9jF7thtlUzPli80Zu9WX4-1JS-2IabCVhL-rb4LzYMrziWUMrju1uzpSmJJmda-gRXeBy3dq04iUa8OQpVi23yJuhw5dUINr-HnNEqR6JGWFXHzqKnGzSmKqGogGKitfJSSA4GwTk9Fs6QJxGDf_gwplVJjmFebomsDz-9z2Dn6cwxVM05CWYNIJyi4HXMo5f1Nwy9E18d30wguTlRoPjaaIlE7-g4HkIwhm92GSXfLpB2UvIJfLzs3VXzAukT1kqPk-99I8rrUvXzd4BDSPuywhPAJr-s_6ctDG5pNUbmXNZAiGOtCJTOJHzBXfSVElLooB-LEO1eT1DpIiDFsvjZTynR4j1_k3Nrpf1VSmvGKPM_OInzXn_ORtiF_Au8Q0jByY3V0g", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f753887-6f22-453e-a62c-448b54e8416d", "record_id": "flaws_cloudtrail:0000234:0f753887-6f22-453e-a62c-448b54e8416d", "row_index": 234, "timestamp": "2018-04-18T03:51:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f753887-6f22-453e-a62c-448b54e8416d", "eventTime": "2018-04-18T03:51:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "422d7367-5fa9-4c7f-8278-26f04b83828", "record_id": "flaws_cloudtrail:0000235:422d7367-5fa9-4c7f-8278-26f04b83828", "row_index": 235, "timestamp": "2018-04-18T03:51:45Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "422d7367-5fa9-4c7f-8278-26f04b83828", "eventTime": "2018-04-18T03:51:45Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4dff964-74c3-4520-bf4c-4cf60a6b6b53", "record_id": "flaws_cloudtrail:0000236:f4dff964-74c3-4520-bf4c-4cf60a6b6b53", "row_index": 236, "timestamp": "2018-04-18T03:51:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1830, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4dff964-74c3-4520-bf4c-4cf60a6b6b53", "eventTime": "2018-04-18T03:51:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: NtPoA3C64b5tJV0L6BdV-m2h4xWm_mniDrz6CicHz2b3xL_5r8Xsi7ST4TVfvWfYOPtdA1LFL1ug5oays33M18e2-Bj9BmUz5Xhi7eJA9fAi_BD7zsE2FjdFhnZdYmVLjpAqfhVaj-Ybr1IW934NIzUf4R5u4Qi_Mx-7OkfIgVV1fYjEKScilMyU4YGCKZJbWtjoSCrZ02NBYVTef3cjsbgPDLj0wu9B7Y2Gc9y0Ud_dB7256N3zFmqCfdPWrXDV1WuMhk9hvEQf93esgwNoAfAmTWkuNAs2s84LDOpsDp_SVy-AHdyf_kiY6o1dC7_eTv1keRB9lPj5H1QSjl9sXWTwPJv9_WzZ6ywLQ1ClGHYM1E2QLRuVHn96_YBFJQ5Olj1qr_OQnzbhB_bfYfqKxc1p961eouxOemkAKWuGDZGHahaySl14S-LctusWtFl7W8HI_gfmlAwgtr0YJTnxVGWZLbzKxf_V_xRalHcvw8NAWKmLvcILDASJuufYepQ9gzD6SlYuO2mjqzZdIMnJyLdpWcqBC8BWltF2XpSiXRlXCkc9iMQguw7Z5CHpJqCtO7f5NvmfLk_zxr-V9MdNS8mXdSkqtn4MoK8C8t-z3V2dEDr5JLyFxCv8cmTg_58VrVU5WwiYvcbtCrC3-1cAmGu5X5zCkwprmHCv", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b78e714-0a82-4c0f-a19b-45d04a7f1980", "record_id": "flaws_cloudtrail:0000237:0b78e714-0a82-4c0f-a19b-45d04a7f1980", "row_index": 237, "timestamp": "2018-04-18T03:51:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b78e714-0a82-4c0f-a19b-45d04a7f1980", "eventTime": "2018-04-18T03:51:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "597548dd-55f0-4d66-8633-17e1d6a61b94", "record_id": "flaws_cloudtrail:0000238:597548dd-55f0-4d66-8633-17e1d6a61b94", "row_index": 238, "timestamp": "2018-04-18T03:51:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "597548dd-55f0-4d66-8633-17e1d6a61b94", "eventTime": "2018-04-18T03:51:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd51dd12-f20b-425a-9d5c-a3f6a6c4fc2b", "record_id": "flaws_cloudtrail:0000239:bd51dd12-f20b-425a-9d5c-a3f6a6c4fc2b", "row_index": 239, "timestamp": "2018-04-18T03:51:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd51dd12-f20b-425a-9d5c-a3f6a6c4fc2b", "eventTime": "2018-04-18T03:51:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57ae27be-209b-46d7-9b1b-177b019240fc", "record_id": "flaws_cloudtrail:0000240:57ae27be-209b-46d7-9b1b-177b019240fc", "row_index": 240, "timestamp": "2018-04-18T03:51:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1834, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57ae27be-209b-46d7-9b1b-177b019240fc", "eventTime": "2018-04-18T03:51:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: fUkyvaFpZsJpIhr2mc_cW2zhQB8411XlsQvKLij5I6_xKSnJteYXlBYNoTs8q7xjCQnQCkTrdpjGhh4JgnGtr9vu4d4BomFpH6zAAG79kGMAM8zyuNKKEItTz5KyL3z856qs1MvqBA3433ijU5NSZEw2W3nDV2gv1rDWfyLcMwdtmW5j2C2iTHn6_zat1QQOQYSZ4ZpS-hFuTPW0GWyIBf9-CaQl7BblBDng1A945uhVJqedwoG6tNYdZw7vJHqV2moVLo0cm-pe931SKuWbRgr2PnD6fagLDffzPPouhGqXRBFdJnwzrBAxuty6bm8rcsenjEGfYZHKpIVc-Cu-XgKH7nm84ySnBkLDf2tgEgSoMO99ItOlQ4iiLDOCstyKLdV-GF9Zw74ABbwuuv0o3Lyz8U0Ea8hFasrkc_EJtMYvf75OwmQdTwVjHiGrThASqPBpfuwR8tAJI_N32qlVkYQqUhJfWDQCC1RPD30ah7HkBKcFOyAqjV-Yc9Vk7gpF-ZOu7AI6h-bbDU-G5eeElV6PkU5Gcr3QHb3q12fC6TmOq1zhOD4cJbQlR0o7BWWgbGdugpwTgkUsoWsRWYJmI0zJSZHLmCRLhMwJZC-1ZmYGF0ISCrmWGasVvlYYZ-IOTN8H9AulzViuCJlCfdWBH3t_oBwXo5dY939kQg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38e78cf7-f67f-4e8c-9da0-887585f7", "record_id": "flaws_cloudtrail:0000241:38e78cf7-f67f-4e8c-9da0-887585f7", "row_index": 241, "timestamp": "2018-04-18T03:51:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1274, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38e78cf7-f67f-4e8c-9da0-887585f7", "eventTime": "2018-04-18T03:51:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b7c4ae4-c1e4-42a8-b8f8-5e2b5c662751", "record_id": "flaws_cloudtrail:0000242:1b7c4ae4-c1e4-42a8-b8f8-5e2b5c662751", "row_index": 242, "timestamp": "2018-04-18T03:51:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1826, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b7c4ae4-c1e4-42a8-b8f8-5e2b5c662751", "eventTime": "2018-04-18T03:51:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: C4mhcDn92XoUfI5uvXSBWtV8q-HJaIOtrerXbL7dVL28yywpg7RSdyb9WCYEfPaoJgRIIgi0WES-vl-8NlvY-Hrt-NDeRnW6cVCLpeluTUD5jhch5c2HzD7Ag81W5guOWdWiBK7fp1XTInW41aDSILAbhvWI_iqR_VvOpbnkOapZyKT3eVgfOJOxb4T38r_1DpWLnfMomOG_BcXuJ2bbK6uW3mK7P8lI-7lbVQH7ifU9AQQIDTZ9n2SgZosad-RGNtA5rNvHAWPVAzOnmJAP2UfWQQnr3Jh1mchYwY3fdRaR5x2HqEHLbnch3fv2tq6cEoLp6mYfr6su2YCkC6O6AGZmdzwtpilTIFjVwbfw2Qyv2QG1YrijJjlSdHGTKTUkMiik3B7cDmqJPKDrbXpAc337mzzNlWC9gHovOVFC_KiZWXUpYjDoSuwzFpkkb6AyO6ekmLTOfAqQrsKQ10Ow9nudzEDDUhY-9ARySzbjaMkYyDfnbxjKMvWwo6EC17V5f7bGrLmlyb_JR_x1tRCEC4TekgvgxNuKQEETwk6dqv93vERw90nOXAYNFHJQ0snf6MWX-0qSJ_B5IEyGulhW5QyZL2WXKOAFk1B8ourOyTf9fm2riVrpIJ_6rWZ_Q7J0Kcy3D-hIbWwGTanTz-xeRZKDFHGcHrRuXA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f427498d2-f726-4f49-a8dc-7903ee4dfdfc", "record_id": "flaws_cloudtrail:0000243:f427498d2-f726-4f49-a8dc-7903ee4dfdfc", "row_index": 243, "timestamp": "2018-04-18T03:51:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f427498d2-f726-4f49-a8dc-7903ee4dfdfc", "eventTime": "2018-04-18T03:51:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "391d668a-75e9-4cfc-9497-83fe0606c20b", "record_id": "flaws_cloudtrail:0000244:391d668a-75e9-4cfc-9497-83fe0606c20b", "row_index": 244, "timestamp": "2018-04-18T03:51:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "391d668a-75e9-4cfc-9497-83fe0606c20b", "eventTime": "2018-04-18T03:51:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "835985ea8-178b-46c2-ab31-2fac99d938b7", "record_id": "flaws_cloudtrail:0000245:835985ea8-178b-46c2-ab31-2fac99d938b7", "row_index": 245, "timestamp": "2018-04-18T03:51:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "835985ea8-178b-46c2-ab31-2fac99d938b7", "eventTime": "2018-04-18T03:51:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad79485f-4c33-4afc-98ac-0425ec8949a8", "record_id": "flaws_cloudtrail:0000246:ad79485f-4c33-4afc-98ac-0425ec8949a8", "row_index": 246, "timestamp": "2018-04-18T03:51:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad79485f-4c33-4afc-98ac-0425ec8949a8", "eventTime": "2018-04-18T03:51:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79aeda0f-71ca-406a-a470-f71e2d75b094", "record_id": "flaws_cloudtrail:0000247:79aeda0f-71ca-406a-a470-f71e2d75b094", "row_index": 247, "timestamp": "2018-04-18T03:51:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1275, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79aeda0f-71ca-406a-a470-f71e2d75b094", "eventTime": "2018-04-18T03:51:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcd03f26-4a59-4a3b-a5e7-9da622734bc07", "record_id": "flaws_cloudtrail:0000248:bcd03f26-4a59-4a3b-a5e7-9da622734bc07", "row_index": 248, "timestamp": "2018-04-18T03:51:51Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcd03f26-4a59-4a3b-a5e7-9da622734bc07", "eventTime": "2018-04-18T03:51:51Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1eccb9a-7085-42d5-904f-c58d52e049f1", "record_id": "flaws_cloudtrail:0000249:b1eccb9a-7085-42d5-904f-c58d52e049f1", "row_index": 249, "timestamp": "2018-04-18T03:51:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1eccb9a-7085-42d5-904f-c58d52e049f1", "eventTime": "2018-04-18T03:51:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32ac1feb-d3cf-4511-b6f9-801566d32c65", "record_id": "flaws_cloudtrail:0000250:32ac1feb-d3cf-4511-b6f9-801566d32c65", "row_index": 250, "timestamp": "2018-04-18T03:51:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32ac1feb-d3cf-4511-b6f9-801566d32c65", "eventTime": "2018-04-18T03:51:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e27e83fb-3f4f-43b3-9f28-7862b472daf3", "record_id": "flaws_cloudtrail:0000251:e27e83fb-3f4f-43b3-9f28-7862b472daf3", "row_index": 251, "timestamp": "2018-04-18T03:51:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e27e83fb-3f4f-43b3-9f28-7862b472daf3", "eventTime": "2018-04-18T03:51:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65c70a84-7449-4371-9c7f-8aaf69f9c9b6", "record_id": "flaws_cloudtrail:0000252:65c70a84-7449-4371-9c7f-8aaf69f9c9b6", "row_index": 252, "timestamp": "2018-04-18T03:51:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65c70a84-7449-4371-9c7f-8aaf69f9c9b6", "eventTime": "2018-04-18T03:51:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "066ae4be-66c4-41bc-8874-18fd2e1c914b", "record_id": "flaws_cloudtrail:0000253:066ae4be-66c4-41bc-8874-18fd2e1c914b", "row_index": 253, "timestamp": "2018-04-18T03:51:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "066ae4be-66c4-41bc-8874-18fd2e1c914b", "eventTime": "2018-04-18T03:51:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: zBSyTveMQsJP_rOHJ56cTYszkYIXOQd7N-Nro7qgShd_7WmQ5pwT3xCTGxGTOBClpYFz6IVt5cYFqrBaVSruRNYrAwB6E1LdmjQMJhIuavRo7P4QUfCDqEToY3AQLQqfj1qyWVyj7mdfPliPKZJsjiAxIA662_FyV8E-wv7LLV1hQ9nwadDz8XsXjHxx-7cOE3uKGaE1X_8gMY3HznMDJO_UdcKzjWPNkssD2L2HddYShfK7BS7W31CJWeJhSK_72AbI3VIUeG3_NsO-gSTCc01hicBceQO7i_DzDdyby3zguU_pwEnc88lqk_HoNyCAvxuyfFKP81QKhZPTVllfeKnD-dLW_WqK_5E94cMOIle0W3_k03nV_AQGML8ryoKdXbUUsUz0XFmtnAWjAgx2XQezvSwwAUxz4j5Wtx_MOc0gpcrO-WXs8rlo6D-kApDwvZ-wf0gwH-P2eJ8Yc5qw2lAutIECqzSkZI83XKvXDpceXlmLdV-lrD-PaM0qNjEag-y9Ah-EZUwn1yGPte09FJ2zEAhojMjxys_10rzV3tA2U8hdyRdxA12wMx0YlHqiNq2dQmvrKwvzlNBIsOAfXoFZ2QrAvYqTPQ0H4XVrV64y-ZSTOQGkqRgRfbCBDaQMWQS0eaq4hsU01Cqo5YvRh4Ob8JwfUrPnGA", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5a2acd0-44b7-4774-a847-7e8f76139ee", "record_id": "flaws_cloudtrail:0000254:b5a2acd0-44b7-4774-a847-7e8f76139ee", "row_index": 254, "timestamp": "2018-04-18T03:51:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5a2acd0-44b7-4774-a847-7e8f76139ee", "eventTime": "2018-04-18T03:51:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fbb9d95-aab6-4aa8-8cde-c23fd24af056", "record_id": "flaws_cloudtrail:0000255:4fbb9d95-aab6-4aa8-8cde-c23fd24af056", "row_index": 255, "timestamp": "2018-04-18T03:51:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fbb9d95-aab6-4aa8-8cde-c23fd24af056", "eventTime": "2018-04-18T03:51:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: eW4EuTdToWcvjLP5rnv9C5q6KE9NwyYYyOrhsnLfmGBRBX_OSvi3TQ-1ZmgZ5lkfOxBxNsPdmuuaihclm7GfcssJljvxEGanz8jdltsXkh_0eQldAZha5EyY3aggmGwyrG3u8TLqDIboWJVE9BZA2XFu0noTW5Gq7PFhC8czErtxIJzFnNj9K_do_7QT5C9ty_1N547mVK4cO5Rqfc_XDrrqbGIswk6FCOp7XaYgFtFn73awQGiCepTwkgAzIayXwLNYS7d0PAd3c7pnROgw1lGFzNtEP8P1eO3dsxGkzzGms-tMIDQUPcPXXgVn1ZUwzN-v-IB5y3NZWn4BWfP1OZKOWVhf1-Pa_9eK1u_vZD9uHzyfnv4tazgb3ePV7ATN5aCGTIakHoCowyjEjnByxZT_3rIfs9_DCaRVVt-5iyCuEBQyUgR8bA0Mg5UQvPfPPY6cbL7gTHFN8094jCmxRYJ8LeqtPd2c0aVcDxMe2RrgkRHI_WW5GRzdyyEW35uEOwdtwVUpbETbOCpnruD1KA3vglCIQZtVScmAK6liitqKu14gqMq3NsscBXGG37PwjVR-7ubBqL5sXhI17C0y7ota0obeEsQyjbw4eNZB3BwVaNDXoCoA1_bdFMwFCrvsUGTK2TFYQv2_4k9Fwlec78VMASIAmAwECok", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19a349e7-441a-4c8a-aa59-012cbb7ea5c7", "record_id": "flaws_cloudtrail:0000256:19a349e7-441a-4c8a-aa59-012cbb7ea5c7", "row_index": 256, "timestamp": "2018-04-18T03:54:04Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIALOWQ6USGIJE743CL", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.151.116.82", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 495, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19a349e7-441a-4c8a-aa59-012cbb7ea5c7", "eventTime": "2018-04-18T03:54:04Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.151.116.82", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIALOWQ6USGIJE743CL", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83a049ff-fd71-4760-b168-0aae1c809815", "record_id": "flaws_cloudtrail:0000257:83a049ff-fd71-4760-b168-0aae1c809815", "row_index": 257, "timestamp": "2018-04-18T03:54:53Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIALOWQ6USGIJE743CL", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.151.116.82", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 499, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83a049ff-fd71-4760-b168-0aae1c809815", "eventTime": "2018-04-18T03:54:53Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.151.116.82", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIALOWQ6USGIJE743CL", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44234edd-1605-40ec-ab37-8f7d75601d91", "record_id": "flaws_cloudtrail:0000258:44234edd-1605-40ec-ab37-8f7d75601d91", "row_index": 258, "timestamp": "2018-04-18T03:57:43Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIALOWQ6USGIJE743CL", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.151.116.82", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-3496"], "raw_record_size_bytes": 624, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44234edd-1605-40ec-ab37-8f7d75601d91", "eventTime": "2018-04-18T03:57:43Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.151.116.82", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIALOWQ6USGIJE743CL", "userName": "backup"}, "requestParameters": {"name": "trail-3496"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-3496"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06bb1f0d-0560-4575-8d2d-04c950743ef4", "record_id": "flaws_cloudtrail:0000259:06bb1f0d-0560-4575-8d2d-04c950743ef4", "row_index": 259, "timestamp": "2018-04-18T03:58:27Z", "event_type": "StopLogging", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIALOWQ6USGIJE743CL", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.151.116.82", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-3496"], "raw_record_size_bytes": 621, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06bb1f0d-0560-4575-8d2d-04c950743ef4", "eventTime": "2018-04-18T03:58:27Z", "eventName": "StopLogging", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.151.116.82", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIALOWQ6USGIJE743CL", "userName": "backup"}, "requestParameters": {"name": "trail-3496"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-3496"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2aa1164-0575-4f5e-8107-754911dcc3e66", "record_id": "flaws_cloudtrail:0000260:d2aa1164-0575-4f5e-8107-754911dcc3e66", "row_index": 260, "timestamp": "2018-04-18T03:58:33Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2aa1164-0575-4f5e-8107-754911dcc3e66", "eventTime": "2018-04-18T03:58:33Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "706cbf2f-14ef-402d-8460-978dfaab37e8", "record_id": "flaws_cloudtrail:0000261:706cbf2f-14ef-402d-8460-978dfaab37e8", "row_index": 261, "timestamp": "2018-04-18T03:58:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "706cbf2f-14ef-402d-8460-978dfaab37e8", "eventTime": "2018-04-18T03:58:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4acca4e6-3c99-40da-81b1-042f59a5478c", "record_id": "flaws_cloudtrail:0000262:4acca4e6-3c99-40da-81b1-042f59a5478c", "row_index": 262, "timestamp": "2018-04-18T03:58:37Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4acca4e6-3c99-40da-81b1-042f59a5478c", "eventTime": "2018-04-18T03:58:37Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd94056-523b-47da-811e-15c35d42b8ce", "record_id": "flaws_cloudtrail:0000263:fd94056-523b-47da-811e-15c35d42b8ce", "row_index": 263, "timestamp": "2018-04-18T03:58:37Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd94056-523b-47da-811e-15c35d42b8ce", "eventTime": "2018-04-18T03:58:37Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52439eaf-e24e-4fde-b758-bd58f661529d4", "record_id": "flaws_cloudtrail:0000264:52439eaf-e24e-4fde-b758-bd58f661529d4", "row_index": 264, "timestamp": "2018-04-18T03:58:37Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52439eaf-e24e-4fde-b758-bd58f661529d4", "eventTime": "2018-04-18T03:58:37Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51fe407f-b317-4844-84d2-88eb41e1375f", "record_id": "flaws_cloudtrail:0000265:51fe407f-b317-4844-84d2-88eb41e1375f", "row_index": 265, "timestamp": "2018-04-18T03:58:37Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51fe407f-b317-4844-84d2-88eb41e1375f", "eventTime": "2018-04-18T03:58:37Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0039cbdb-3c46-4e69-90b8-18fbe034299e", "record_id": "flaws_cloudtrail:0000266:0039cbdb-3c46-4e69-90b8-18fbe034299e", "row_index": 266, "timestamp": "2018-04-18T03:58:37Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0039cbdb-3c46-4e69-90b8-18fbe034299e", "eventTime": "2018-04-18T03:58:37Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1353a35b-be20-44f2-bc2c-898336c9aef5", "record_id": "flaws_cloudtrail:0000267:1353a35b-be20-44f2-bc2c-898336c9aef5", "row_index": 267, "timestamp": "2018-04-18T03:58:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1353a35b-be20-44f2-bc2c-898336c9aef5", "eventTime": "2018-04-18T03:58:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "289714b8e-2ab3-4c8f-8509-33fbd427db14", "record_id": "flaws_cloudtrail:0000268:289714b8e-2ab3-4c8f-8509-33fbd427db14", "row_index": 268, "timestamp": "2018-04-18T03:58:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "289714b8e-2ab3-4c8f-8509-33fbd427db14", "eventTime": "2018-04-18T03:58:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ca78959-dcdf-4999-bba0-4a4d20dccbc5", "record_id": "flaws_cloudtrail:0000269:3ca78959-dcdf-4999-bba0-4a4d20dccbc5", "row_index": 269, "timestamp": "2018-04-18T03:58:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ca78959-dcdf-4999-bba0-4a4d20dccbc5", "eventTime": "2018-04-18T03:58:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49e7f18d-2b9c-480e-9d5d-2c0de1796234", "record_id": "flaws_cloudtrail:0000270:49e7f18d-2b9c-480e-9d5d-2c0de1796234", "row_index": 270, "timestamp": "2018-04-18T03:58:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49e7f18d-2b9c-480e-9d5d-2c0de1796234", "eventTime": "2018-04-18T03:58:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f456039-53e4-4a2e-877c-36e44025714a", "record_id": "flaws_cloudtrail:0000271:f456039-53e4-4a2e-877c-36e44025714a", "row_index": 271, "timestamp": "2018-04-18T03:58:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f456039-53e4-4a2e-877c-36e44025714a", "eventTime": "2018-04-18T03:58:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "604510-a84c-4f8f-8417-388302d33", "record_id": "flaws_cloudtrail:0000272:604510-a84c-4f8f-8417-388302d33", "row_index": 272, "timestamp": "2018-04-18T03:58:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "604510-a84c-4f8f-8417-388302d33", "eventTime": "2018-04-18T03:58:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "758b9395-036a-465c-a7ae-b30411291dce", "record_id": "flaws_cloudtrail:0000273:758b9395-036a-465c-a7ae-b30411291dce", "row_index": 273, "timestamp": "2018-04-18T03:58:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "758b9395-036a-465c-a7ae-b30411291dce", "eventTime": "2018-04-18T03:58:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dc67a4b-5794-4e14-ae3f-aa2b2d1e85ce", "record_id": "flaws_cloudtrail:0000274:3dc67a4b-5794-4e14-ae3f-aa2b2d1e85ce", "row_index": 274, "timestamp": "2018-04-18T03:58:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dc67a4b-5794-4e14-ae3f-aa2b2d1e85ce", "eventTime": "2018-04-18T03:58:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f273cc5-2236-4bbf-989f-6f1c40779710", "record_id": "flaws_cloudtrail:0000275:0f273cc5-2236-4bbf-989f-6f1c40779710", "row_index": 275, "timestamp": "2018-04-18T03:58:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f273cc5-2236-4bbf-989f-6f1c40779710", "eventTime": "2018-04-18T03:58:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8120b84f-ee8a-453a-8faf-36134db0b3f7", "record_id": "flaws_cloudtrail:0000276:8120b84f-ee8a-453a-8faf-36134db0b3f7", "row_index": 276, "timestamp": "2018-04-18T03:58:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8120b84f-ee8a-453a-8faf-36134db0b3f7", "eventTime": "2018-04-18T03:58:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a3df6f9-1370-4b6c-a85c-3547a01cc98b", "record_id": "flaws_cloudtrail:0000277:6a3df6f9-1370-4b6c-a85c-3547a01cc98b", "row_index": 277, "timestamp": "2018-04-18T03:58:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a3df6f9-1370-4b6c-a85c-3547a01cc98b", "eventTime": "2018-04-18T03:58:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b167a759-415f-4175-a6d8-b045802f93035", "record_id": "flaws_cloudtrail:0000278:b167a759-415f-4175-a6d8-b045802f93035", "row_index": 278, "timestamp": "2018-04-18T03:58:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b167a759-415f-4175-a6d8-b045802f93035", "eventTime": "2018-04-18T03:58:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ca67f5b-dac2-461a-8a9b-55fc8d3ad0ef", "record_id": "flaws_cloudtrail:0000279:4ca67f5b-dac2-461a-8a9b-55fc8d3ad0ef", "row_index": 279, "timestamp": "2018-04-18T03:58:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ca67f5b-dac2-461a-8a9b-55fc8d3ad0ef", "eventTime": "2018-04-18T03:58:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "793e5c40-621d-4da1-b38d-4d405605d850", "record_id": "flaws_cloudtrail:0000280:793e5c40-621d-4da1-b38d-4d405605d850", "row_index": 280, "timestamp": "2018-04-18T03:58:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "793e5c40-621d-4da1-b38d-4d405605d850", "eventTime": "2018-04-18T03:58:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94451b4-a5c2-4b3b-8a02-3cdac6f90740", "record_id": "flaws_cloudtrail:0000281:94451b4-a5c2-4b3b-8a02-3cdac6f90740", "row_index": 281, "timestamp": "2018-04-18T03:58:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94451b4-a5c2-4b3b-8a02-3cdac6f90740", "eventTime": "2018-04-18T03:58:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25850e3-5a3b-467d-9cef-6916c96ce3f1", "record_id": "flaws_cloudtrail:0000282:25850e3-5a3b-467d-9cef-6916c96ce3f1", "row_index": 282, "timestamp": "2018-04-18T03:58:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25850e3-5a3b-467d-9cef-6916c96ce3f1", "eventTime": "2018-04-18T03:58:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd5b73be-923c-4ff0-b4f8-91d0bd5fe8f0", "record_id": "flaws_cloudtrail:0000283:bd5b73be-923c-4ff0-b4f8-91d0bd5fe8f0", "row_index": 283, "timestamp": "2018-04-18T03:58:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd5b73be-923c-4ff0-b4f8-91d0bd5fe8f0", "eventTime": "2018-04-18T03:58:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d82eac7-210d-4285-bdfc-69f5f0d50faa", "record_id": "flaws_cloudtrail:0000284:9d82eac7-210d-4285-bdfc-69f5f0d50faa", "row_index": 284, "timestamp": "2018-04-18T03:58:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d82eac7-210d-4285-bdfc-69f5f0d50faa", "eventTime": "2018-04-18T03:58:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd56568f-2f4c-4725-b875-d86b01e5b1f5", "record_id": "flaws_cloudtrail:0000285:fd56568f-2f4c-4725-b875-d86b01e5b1f5", "row_index": 285, "timestamp": "2018-04-18T03:58:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd56568f-2f4c-4725-b875-d86b01e5b1f5", "eventTime": "2018-04-18T03:58:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee895d0a-0736-41ad-a463-e82ad89d520c", "record_id": "flaws_cloudtrail:0000286:ee895d0a-0736-41ad-a463-e82ad89d520c", "row_index": 286, "timestamp": "2018-04-18T03:58:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee895d0a-0736-41ad-a463-e82ad89d520c", "eventTime": "2018-04-18T03:58:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f4bfb6d-5b29-4203-931d-ae1f332a465f", "record_id": "flaws_cloudtrail:0000287:6f4bfb6d-5b29-4203-931d-ae1f332a465f", "row_index": 287, "timestamp": "2018-04-18T03:58:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f4bfb6d-5b29-4203-931d-ae1f332a465f", "eventTime": "2018-04-18T03:58:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd1e2310-067a-4416-bac1-f8a1ca3fc029", "record_id": "flaws_cloudtrail:0000288:fd1e2310-067a-4416-bac1-f8a1ca3fc029", "row_index": 288, "timestamp": "2018-04-18T03:58:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd1e2310-067a-4416-bac1-f8a1ca3fc029", "eventTime": "2018-04-18T03:58:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: KhAPlF_dvNhizIoK6j5cKkkYcDEklAgFolC9inja39HjokmZ3EAuH-tUnLkl-MV9UW2N_rWhz-TwqFIWHgPkTr23ecbIrpz7FlmB65kK5W4AhVkIJJEutz6FnNVYxV-vGQOSg-XgUzc3_pco7oYvLGBLoiQUtjUGmxcW9WwrybS1ZDsweXD_K2Ylbo_QTGVhybtbdKSweoUx03rVmc_c_0VMtRmxFT5g4dDIPZjG6RDHa8uiT9EPEXqW1OdnUG440eRmm636lrZogwpUMCtxgNNz0tsRbsEkjkRo7-OR6YJ1l3YVZ6nfmQVglRmWwAT9iqToDDPxc8NohZbvBZwyjkPlcnpscwI3IEOdXX1_k4ZDMbqt_Xbp1ffIera4PQ2FPyuk2a3vgPgKG52oJ6C6ZICu_9WvN6xlrgKl5vowvNrFl4sZnDWw7pDl6T0HFEO2pNR-qVtHe7ByMRWnlQHiOEuczNmSuHX-_if6xMHjQVRmFUhYprL6Eyj_-zMqSeA96_UiPL5BmegTwNudMLstubwHR0q7eKZ1v-EZIbaYs5Bs5oZPBQFpw28Bi3YHYPw9eKEKbDm1EjKGHm2mjxmeRcfn82-fmNW6-8Txk7pBHWiRDlQ9ATlSOp_cbEYap77ush3k71U9EyA8Mcj4qRhWqaqYXdeXG09HX08", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "171032-6617-427c-a0be-3ebca0eef625", "record_id": "flaws_cloudtrail:0000289:171032-6617-427c-a0be-3ebca0eef625", "row_index": 289, "timestamp": "2018-04-18T03:58:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "171032-6617-427c-a0be-3ebca0eef625", "eventTime": "2018-04-18T03:58:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a09f1d5c-6152-4347-accb-ed11584fa781", "record_id": "flaws_cloudtrail:0000290:a09f1d5c-6152-4347-accb-ed11584fa781", "row_index": 290, "timestamp": "2018-04-18T03:58:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a09f1d5c-6152-4347-accb-ed11584fa781", "eventTime": "2018-04-18T03:58:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ef33d1f-b11d-4c96-9d82-de5c8ef59707", "record_id": "flaws_cloudtrail:0000291:8ef33d1f-b11d-4c96-9d82-de5c8ef59707", "row_index": 291, "timestamp": "2018-04-18T03:58:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ef33d1f-b11d-4c96-9d82-de5c8ef59707", "eventTime": "2018-04-18T03:58:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ca8b69f-a397-4866-8fbf-31928242d12b", "record_id": "flaws_cloudtrail:0000292:4ca8b69f-a397-4866-8fbf-31928242d12b", "row_index": 292, "timestamp": "2018-04-18T03:58:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ca8b69f-a397-4866-8fbf-31928242d12b", "eventTime": "2018-04-18T03:58:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4001eedf-02a0-4a05-b0b0-982fbb53b190", "record_id": "flaws_cloudtrail:0000293:4001eedf-02a0-4a05-b0b0-982fbb53b190", "row_index": 293, "timestamp": "2018-04-18T03:58:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4001eedf-02a0-4a05-b0b0-982fbb53b190", "eventTime": "2018-04-18T03:58:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: goDHjgpVZ8NHym2YmhaxMPtlynORo8eErF4MKe-78HDMiSxQ8gZro_TWhB5WnzQJ3_15_MX7xPlzCd60bGi6LG4yOTIS2FX8ucbTPzuLPZXsolVnqJYapAe4P70PCmThuCXIpItluDENoUX9pU4iUCYjk4iPBcbsYdhXHDX0A65-CJZgkFnTBmryTAMPT3ysiGfWx5yRatZ1rBVNcsbuYnx5K6X87EmhZF5Krg6hWfLZzJOje_Wws0QolRnmxgtZM4_pKhRTMyTmdPshVXM7WyU8dGfhuS5BZmE5wmyX4BFDzwV3hOTOphiTsle4TH3tv3EkFmn1z8bRMwSw4ji7sLO-2AHsfRkuiAPpVtPzQV0sDr6lwTcbarEVPJtipXGHYA_llRPs4qJipUAJeWKrbDj0Ob4BO3ARFyhWluvKMidHv_WFeYpFhKriAV_GbyjBrqUZHw4W0K1Xg0cA860FSSIzBJsomYBWKORQ-ZFP_XId8RZe7y8C0ZbrrO1aCltZoak5_RgMopDOCzTOgLZjNr-n7DJV3gWHvAsE7T3iRh6qg--eM6u39VPZSobIS5tMTtSJZZ_9w1KKGaH16diwkqKnTyg11_7NQq-MBQmX7luwJj93-B1XYV0m6t_Iv4Bc7GpXqYlKus2WGhK02-6KpC8z1dRpftu1BzukE1A", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d10a6e5-9633-4f51-a83d-6a690a4d6cec", "record_id": "flaws_cloudtrail:0000294:5d10a6e5-9633-4f51-a83d-6a690a4d6cec", "row_index": 294, "timestamp": "2018-04-18T03:58:49Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d10a6e5-9633-4f51-a83d-6a690a4d6cec", "eventTime": "2018-04-18T03:58:49Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a59de038-bf18-4517-97cd-f2433c1a73fa", "record_id": "flaws_cloudtrail:0000295:a59de038-bf18-4517-97cd-f2433c1a73fa", "row_index": 295, "timestamp": "2018-04-18T03:58:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a59de038-bf18-4517-97cd-f2433c1a73fa", "eventTime": "2018-04-18T03:58:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: CM0TC8VsP65FiDdU1qx_xdueh6WW19nOl8YI0P3OOVgZf_G7g1DrI9q7FTFXwzjSe3NAmLFjYgUoZVpQuyqu_FrK3VFpXskLGU7aX0Tw9ARpYiCuUcepyh5u7C95-FlIKdse5c0XD0nRJ3cDiexlJnqNcv-iGtjaFkaoPMfscHjnOUkCV810B1CxnlqQFYXpivWAWxYOUr83MIYkSOcG6cn3uu4plyWPqb2sq28oHeNtegCG3FD9tVikgwkU06x1HoLhXp6ONBivdIHYSqajDNmN7ON_v-9klblvbqiMfzC4SJG8lTiylYI_cglKdcQ8aLdJFe8yLcRB7GRjj8k2G_6KMqhw5mOfWjqGFNWkVB-f5O_qt7lFhIgYGaGDsw0fH3uqcLjHiImE8ABd-qB3kcPxp6f-GTbkqTJK9HVailmAAW4NNarRsrykvtc-O9kCkj8KLjl1dF8Xglt1fMEMsWpJyo3syufUvSOhJnPAs5c70DWoXT0-KCrwQydoLVg8V8-q9hVnYGXeke5T8h8lIgU9e8C42sIMoOxRwyk3IUDwtNgDBSJzx_3OAKiCk15cjVI4Da9GhBT7lzGHxxOYkglgVzobjrr9Rv6nRSnCvtT-6RiOOqjdFjSlalOLMOwWum1BUMni3MuO2aWlFH6RW69uYCrErG1Vmg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4e8b340-497d-413a-a3c9-bcd3ea46667", "record_id": "flaws_cloudtrail:0000296:d4e8b340-497d-413a-a3c9-bcd3ea46667", "row_index": 296, "timestamp": "2018-04-18T03:58:50Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4e8b340-497d-413a-a3c9-bcd3ea46667", "eventTime": "2018-04-18T03:58:50Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "208e4fe7-964a-46c6-84e0-4a537081e811f", "record_id": "flaws_cloudtrail:0000297:208e4fe7-964a-46c6-84e0-4a537081e811f", "row_index": 297, "timestamp": "2018-04-18T03:58:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "208e4fe7-964a-46c6-84e0-4a537081e811f", "eventTime": "2018-04-18T03:58:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "304322a-206b-495e-ba92-472439abe1c", "record_id": "flaws_cloudtrail:0000298:304322a-206b-495e-ba92-472439abe1c", "row_index": 298, "timestamp": "2018-04-18T03:58:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "304322a-206b-495e-ba92-472439abe1c", "eventTime": "2018-04-18T03:58:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffdb4808-e224-40bc-a231-823e6aacba97", "record_id": "flaws_cloudtrail:0000299:ffdb4808-e224-40bc-a231-823e6aacba97", "row_index": 299, "timestamp": "2018-04-18T03:58:51Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffdb4808-e224-40bc-a231-823e6aacba97", "eventTime": "2018-04-18T03:58:51Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c933b8e5-0e71-4449-8a64-6829f7cb3607", "record_id": "flaws_cloudtrail:0000300:c933b8e5-0e71-4449-8a64-6829f7cb3607", "row_index": 300, "timestamp": "2018-04-18T03:58:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c933b8e5-0e71-4449-8a64-6829f7cb3607", "eventTime": "2018-04-18T03:58:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50eeb1e0-fa1e-47cb-87d7-1e2f5a12c58b", "record_id": "flaws_cloudtrail:0000301:50eeb1e0-fa1e-47cb-87d7-1e2f5a12c58b", "row_index": 301, "timestamp": "2018-04-18T03:58:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50eeb1e0-fa1e-47cb-87d7-1e2f5a12c58b", "eventTime": "2018-04-18T03:58:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: x9elU4cF9pKkr5AcLiYvMor3XNIxW8FyjhVxnyIXj387QMXuEPeTqGPLOXkYr6DpywpSr7iyXiX0bSBuR32uwPWruuYICee8Jg7FWpz5Cx1_GFOIoTfcc7pBAB2uu-e17H08M4uoNV335aqOesa_W1I5-5hftGKCLzALlqZC5il4Ab5COn0q3IaV7FFJtLQTOSSWZPgIK1yBfVwdXhSZfQeJvg3qBIixI9ApAqPbPeuz787sICi8NceZ55Lg-RwEgCvkcGkyBMmfQndAfWImXmOq4KT3f49giZxrJtzNWn9OM-qZBY9tP6IqxZazC_1tse8Bq9Y1HRfheVF_CnmGyQdbPnP4wPUaoohTkd_uDzLbJJou18Vr39knNFRaH9AYLr8gtQaV0LmtT4tP00CUZaknXsF7X1S1XcnZvxCIowBK5yYWGpSv5kzzptbZd90dYTPnEctf0z79zWAWwb1-BxxeKqZ6RySpcASJVqDbX4MKa43GEAgzbKNGzSCDHN9EbOpVPouaY6s8JwaQrzpUrat00Gh1Q1VwHtLOj3KO4KTRBE2WMiCfevOUgjylvnRgcfmsSVyVzqGIPRkPZld7S8g6f7rMu7Gzvqx8QglYBvsfOpP02EKFTf_ojRXNUIs5rhSNkLin091SyMIKPp73FyLEQtqVW1At-jJoPhNp", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0df773c-a464-41fe-8bea-36c027af0a3f", "record_id": "flaws_cloudtrail:0000302:a0df773c-a464-41fe-8bea-36c027af0a3f", "row_index": 302, "timestamp": "2018-04-18T03:58:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0df773c-a464-41fe-8bea-36c027af0a3f", "eventTime": "2018-04-18T03:58:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad482ab9-c9c8-483c-8653-6d08f05c8bf1", "record_id": "flaws_cloudtrail:0000303:ad482ab9-c9c8-483c-8653-6d08f05c8bf1", "row_index": 303, "timestamp": "2018-04-18T03:58:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad482ab9-c9c8-483c-8653-6d08f05c8bf1", "eventTime": "2018-04-18T03:58:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eabd7f0-eb51-4854-8bfc-1b9493295743", "record_id": "flaws_cloudtrail:0000304:6eabd7f0-eb51-4854-8bfc-1b9493295743", "row_index": 304, "timestamp": "2018-04-18T03:58:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eabd7f0-eb51-4854-8bfc-1b9493295743", "eventTime": "2018-04-18T03:58:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38ada5fd-8c90-4c19-bd18-887b255956", "record_id": "flaws_cloudtrail:0000305:38ada5fd-8c90-4c19-bd18-887b255956", "row_index": 305, "timestamp": "2018-04-18T03:58:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38ada5fd-8c90-4c19-bd18-887b255956", "eventTime": "2018-04-18T03:58:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "814a3ad9-eea7-45fd-b2a8-91db5e1ad246", "record_id": "flaws_cloudtrail:0000306:814a3ad9-eea7-45fd-b2a8-91db5e1ad246", "row_index": 306, "timestamp": "2018-04-18T03:58:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "814a3ad9-eea7-45fd-b2a8-91db5e1ad246", "eventTime": "2018-04-18T03:58:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4f0e3bc-4100-4386-abb8-2d6e7723f990", "record_id": "flaws_cloudtrail:0000307:a4f0e3bc-4100-4386-abb8-2d6e7723f990", "row_index": 307, "timestamp": "2018-04-18T03:58:55Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4f0e3bc-4100-4386-abb8-2d6e7723f990", "eventTime": "2018-04-18T03:58:55Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cff07883-ba7a-4850-9fed-d9926d55795b", "record_id": "flaws_cloudtrail:0000308:cff07883-ba7a-4850-9fed-d9926d55795b", "row_index": 308, "timestamp": "2018-04-18T03:58:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cff07883-ba7a-4850-9fed-d9926d55795b", "eventTime": "2018-04-18T03:58:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0f4780d-c47a-4c8e-b75c-e78e0f4955de", "record_id": "flaws_cloudtrail:0000309:f0f4780d-c47a-4c8e-b75c-e78e0f4955de", "row_index": 309, "timestamp": "2018-04-18T03:58:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0f4780d-c47a-4c8e-b75c-e78e0f4955de", "eventTime": "2018-04-18T03:58:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85b7ca18-9f6d-4646-b18d-c64fc0bebff2", "record_id": "flaws_cloudtrail:0000310:85b7ca18-9f6d-4646-b18d-c64fc0bebff2", "row_index": 310, "timestamp": "2018-04-18T03:58:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85b7ca18-9f6d-4646-b18d-c64fc0bebff2", "eventTime": "2018-04-18T03:58:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92d49d08-0941-438c-a6ef-559848bd083c", "record_id": "flaws_cloudtrail:0000311:92d49d08-0941-438c-a6ef-559848bd083c", "row_index": 311, "timestamp": "2018-04-18T03:58:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92d49d08-0941-438c-a6ef-559848bd083c", "eventTime": "2018-04-18T03:58:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2965d48-4f44-4804-a7a0-bf41dff4285d", "record_id": "flaws_cloudtrail:0000312:f2965d48-4f44-4804-a7a0-bf41dff4285d", "row_index": 312, "timestamp": "2018-04-18T03:58:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2965d48-4f44-4804-a7a0-bf41dff4285d", "eventTime": "2018-04-18T03:58:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc899733d-60ea-4ee6-b401-0d980285e832", "record_id": "flaws_cloudtrail:0000313:dc899733d-60ea-4ee6-b401-0d980285e832", "row_index": 313, "timestamp": "2018-04-18T03:58:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc899733d-60ea-4ee6-b401-0d980285e832", "eventTime": "2018-04-18T03:58:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dd41b9d-a960-45e4-a5a3-767754fa3ad1", "record_id": "flaws_cloudtrail:0000314:9dd41b9d-a960-45e4-a5a3-767754fa3ad1", "row_index": 314, "timestamp": "2018-04-18T03:58:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dd41b9d-a960-45e4-a5a3-767754fa3ad1", "eventTime": "2018-04-18T03:58:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b775f56c-af6c-4496-8d06-113c50684f89", "record_id": "flaws_cloudtrail:0000315:b775f56c-af6c-4496-8d06-113c50684f89", "row_index": 315, "timestamp": "2018-04-18T03:58:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b775f56c-af6c-4496-8d06-113c50684f89", "eventTime": "2018-04-18T03:58:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97b45665-7bb2-4f7d-8610-b2ae0f31dda9", "record_id": "flaws_cloudtrail:0000316:97b45665-7bb2-4f7d-8610-b2ae0f31dda9", "row_index": 316, "timestamp": "2018-04-18T03:58:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97b45665-7bb2-4f7d-8610-b2ae0f31dda9", "eventTime": "2018-04-18T03:58:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: _uSeEzQKMVz-3ph66_MxcoxwwXSWoXbSevNZAAJvNXpJtHxwgQ0x_BHGxtlPNckGunXTRjb1a68YOO5Su7FRvkKTRB5vsVsSPW6hseUQif8vJPKBZ6olxVKkCTFjolubpwJoRUqbE8vR-Rn6iTHKwvntTWhrnJ484WG1ZC5FsDiCFR7eQxEY1jgcbGpW0qatw-xJbernaivfbLrs9_wwMLPdu8xZx7HCCoRQsByu5vzC5LBl0xhXV9K_mV0Epsx0ybk0DxYSYpseqKVT6uUyUFvBygIGhAx-1xKyU4nrxDGnZIx4eG_Ek-Lscen9N5W1CoSZ7k4ZQUrdWWAVG5FIUzz-iWAV_mlxvcxikDyacgm7I9bp4Jl2xpKOUjj8do6zSQDAnsPFGsgqk9JqsV30FTLhdguPF-psk88-AzzpUboImPCTNY-zV2HaSN643lOwiMDqJzezWwrOex_PWCYqeoAuqfiBZ6PBmuPnlQGj_npeom8r4XUY0kIG_hkPuh-KU3e6KF0_8VMnw13lrLJC4exh_ge1uNHGhihcmzEWhLheDAd-eILg2hu7zDCrWbiVi7ywMGgwCy-a-pOWyXv4V2UMC1fuwkkHAARuYxdMg6LoByf-63nIm5t6yltAfDITZpQ6amnFnacGFL7367x1VDtCkH1BZ0Q5ng", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1741d438-cc6b-44ff-b0e0-23b10cb1367f", "record_id": "flaws_cloudtrail:0000317:1741d438-cc6b-44ff-b0e0-23b10cb1367f", "row_index": 317, "timestamp": "2018-04-18T03:58:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1741d438-cc6b-44ff-b0e0-23b10cb1367f", "eventTime": "2018-04-18T03:58:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81d7487d-1d1f-494f-bd0f-249cbecfe41a", "record_id": "flaws_cloudtrail:0000318:81d7487d-1d1f-494f-bd0f-249cbecfe41a", "row_index": 318, "timestamp": "2018-04-18T03:58:59Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81d7487d-1d1f-494f-bd0f-249cbecfe41a", "eventTime": "2018-04-18T03:58:59Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e29dbc37-3f38-4072-832f-aa6ecbe27444", "record_id": "flaws_cloudtrail:0000319:e29dbc37-3f38-4072-832f-aa6ecbe27444", "row_index": 319, "timestamp": "2018-04-18T03:58:59Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e29dbc37-3f38-4072-832f-aa6ecbe27444", "eventTime": "2018-04-18T03:58:59Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c44ae53-a9c4-4f94-b514-bce6abd9e85b", "record_id": "flaws_cloudtrail:0000320:7c44ae53-a9c4-4f94-b514-bce6abd9e85b", "row_index": 320, "timestamp": "2018-04-18T03:59:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c44ae53-a9c4-4f94-b514-bce6abd9e85b", "eventTime": "2018-04-18T03:59:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: bgLEcyzqfPhm5Y9kiqArTHcbHpM00B3fCed2_FYFdetVZw0w2aMvGA3crsHbb6cDpl-A69Ksv56B-GlsygDd840G3ijMu0GGfS-bG5_FWKRIvMm4J3dzNrNdr3zmHU9oYygYtsz8CupnYRdcDrChHIwq4FGczOcdKliEXcUXVcO8WDKAGaZdTWamn8vYQZAHeZGLOoakkUTH6jTwq-VYb3DKV55E62xRcyiwu0T18E-c8itQgrj0ujpMNx5DrMTQ7zTWP9F-2JVEGMlLNqrk_YndB83Zm4DMaMDfgqdegmqvEKXeM1a4hm14lEQnM-Z8kGfz7sLlA2tAWqwo23pZhkPbmRxkG-MwhF2F_25V3cBwWTXrku-nWZzpHZu-cKrmbPUMCRgg_EK1T5fcS9p6wb9VDAyn5SjY6IzI9XtHvbxgAtIjBBGs_LXsYFJRcOsj5hCLh0Nojjqnzfg3RzP_2RjFmzb8UqYDUJlhv0meGhEfkg97_JVhN1eAarlAI2ZY7NysgEd7wWbjT4Zs1uY2RMGon5Y_nti2GsWtfZN4tYT7cHiNKJKHPUr3voq42iXTZ5H74z9vmHutoWwL1CzUwGjQuntvOB285yuijRJZJYdA7sX7NB9nfuza7rker0e3H_mTbnqpGx6JnuYlXxQaVQGLEX_ukVg1U4eDLHg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b194d935-e4d3-40f8-8586-41d272030a14e", "record_id": "flaws_cloudtrail:0000321:b194d935-e4d3-40f8-8586-41d272030a14e", "row_index": 321, "timestamp": "2018-04-18T03:59:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b194d935-e4d3-40f8-8586-41d272030a14e", "eventTime": "2018-04-18T03:59:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57ae2cd5-4034-41b0-b0e6-b5b127671", "record_id": "flaws_cloudtrail:0000322:57ae2cd5-4034-41b0-b0e6-b5b127671", "row_index": 322, "timestamp": "2018-04-18T03:59:00Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57ae2cd5-4034-41b0-b0e6-b5b127671", "eventTime": "2018-04-18T03:59:00Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "849c6c48-173b-46a1-a2f2-ff84836ef8bd", "record_id": "flaws_cloudtrail:0000323:849c6c48-173b-46a1-a2f2-ff84836ef8bd", "row_index": 323, "timestamp": "2018-04-18T03:59:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "849c6c48-173b-46a1-a2f2-ff84836ef8bd", "eventTime": "2018-04-18T03:59:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f3a8608-d15c-408f-b0e1-40674db858", "record_id": "flaws_cloudtrail:0000324:6f3a8608-d15c-408f-b0e1-40674db858", "row_index": 324, "timestamp": "2018-04-18T03:59:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f3a8608-d15c-408f-b0e1-40674db858", "eventTime": "2018-04-18T03:59:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e769fd48-e300-45de-a6f2-acbbd7934df2", "record_id": "flaws_cloudtrail:0000325:e769fd48-e300-45de-a6f2-acbbd7934df2", "row_index": 325, "timestamp": "2018-04-18T03:59:02Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e769fd48-e300-45de-a6f2-acbbd7934df2", "eventTime": "2018-04-18T03:59:02Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a367f03-75be-47fe-bf18-f493270d230ef", "record_id": "flaws_cloudtrail:0000326:3a367f03-75be-47fe-bf18-f493270d230ef", "row_index": 326, "timestamp": "2018-04-18T03:59:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a367f03-75be-47fe-bf18-f493270d230ef", "eventTime": "2018-04-18T03:59:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a36f6261-72ad-4d2a-ae3e-927ec2422ca8", "record_id": "flaws_cloudtrail:0000327:a36f6261-72ad-4d2a-ae3e-927ec2422ca8", "row_index": 327, "timestamp": "2018-04-18T03:59:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a36f6261-72ad-4d2a-ae3e-927ec2422ca8", "eventTime": "2018-04-18T03:59:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a83276a-a9fb-4842-82eb-ada7145c8427", "record_id": "flaws_cloudtrail:0000328:9a83276a-a9fb-4842-82eb-ada7145c8427", "row_index": 328, "timestamp": "2018-04-18T03:59:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a83276a-a9fb-4842-82eb-ada7145c8427", "eventTime": "2018-04-18T03:59:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "003d60b9-620a-4871-b884-5d3366e0faec", "record_id": "flaws_cloudtrail:0000329:003d60b9-620a-4871-b884-5d3366e0faec", "row_index": 329, "timestamp": "2018-04-18T03:59:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "003d60b9-620a-4871-b884-5d3366e0faec", "eventTime": "2018-04-18T03:59:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02ec25c3-b69b-45bd-b945-a5dfb5a1fa89", "record_id": "flaws_cloudtrail:0000330:02ec25c3-b69b-45bd-b945-a5dfb5a1fa89", "row_index": 330, "timestamp": "2018-04-18T03:59:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1832, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02ec25c3-b69b-45bd-b945-a5dfb5a1fa89", "eventTime": "2018-04-18T03:59:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: VaV8YVr7EOphmsdoImgqslm_DTJe7JysteVS_7HtdoWfGBw0FUDso1in4DpS2_IQptlMPvC9LFOsUS-iE97G8lpdDp_3Vo9v546tnTIzMrKDKOdi4oS_1u-QHCdkZskOeTUjJH-_WvYfXj3TwLIVQ6ui1kcrarTB4yuVyQH3BzV10T3-qcifp8yrlSpF1Q1ouZi16oX6TM-MZ1OXOabngEgs07Aaemvs9fVE0j5YEInPjKXpLyQnnpTQaAjI4NHIoqHIB8uitQmj7nTav-YeIcnSw4m34N3_Ju1JwGE4wcxUx9Fp4WdLnDtcJwIEQ7nU0V_FHZ0DyToxqLG7jCeOcQImry5VzT_KcJQAqz4Sji-oFHQMl1_7I2UWKqEMm4_kIs9XUEt3zSmSSpK6uuPbt8iSb12gW7YxD55LyLgLDsejWJHDWrjNQd0z_pk3k9AVWZpt0SRPQ8KiV3NK26sG22ilVi5e3fbdYthk5XXdWWDBPeeblWZ06K9r-tngUDG682XsUI1DAowhceoQLidl87UBAdvS1M9vWTKZyCBbMZL8ijCuW6K8XBfZsRJZcQdKBLLmy2xm2zN1CR5pOmG7l2OvrRFgEdErWEZzKZRExsMU6lehN-L_vyMdxwfZYlhR9-mN3Z3uFaoSXRahUTl6zNCZRFH8-QD8iSeO", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c13941e-cd21-46a0-872c-b8dfcceebc6a", "record_id": "flaws_cloudtrail:0000331:c13941e-cd21-46a0-872c-b8dfcceebc6a", "row_index": 331, "timestamp": "2018-04-18T03:59:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c13941e-cd21-46a0-872c-b8dfcceebc6a", "eventTime": "2018-04-18T03:59:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "988a28eb-ee1a-498b-9207-8a1bb6c1de38", "record_id": "flaws_cloudtrail:0000332:988a28eb-ee1a-498b-9207-8a1bb6c1de38", "row_index": 332, "timestamp": "2018-04-18T03:59:05Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "988a28eb-ee1a-498b-9207-8a1bb6c1de38", "eventTime": "2018-04-18T03:59:05Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5eda9944-0164-40e2-ba35-6228d7f50d7b", "record_id": "flaws_cloudtrail:0000333:5eda9944-0164-40e2-ba35-6228d7f50d7b", "row_index": 333, "timestamp": "2018-04-18T03:59:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5eda9944-0164-40e2-ba35-6228d7f50d7b", "eventTime": "2018-04-18T03:59:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4eb12146-0785-49f9-86d6-daf93f7ea017", "record_id": "flaws_cloudtrail:0000334:4eb12146-0785-49f9-86d6-daf93f7ea017", "row_index": 334, "timestamp": "2018-04-18T03:59:06Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4eb12146-0785-49f9-86d6-daf93f7ea017", "eventTime": "2018-04-18T03:59:06Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cca40ff-fe77-4fd8-8f9c-6a56d993a6b1", "record_id": "flaws_cloudtrail:0000335:7cca40ff-fe77-4fd8-8f9c-6a56d993a6b1", "row_index": 335, "timestamp": "2018-04-18T03:59:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cca40ff-fe77-4fd8-8f9c-6a56d993a6b1", "eventTime": "2018-04-18T03:59:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: DrVttG4htZYngJDnhw8DtQenZdVqZuyU8qjzJAGb6CdBbjZx3UNU1vi1psLTWYXI81AvVUNTHCjA5xHE4QrdKXbSbg6r-UuWH7f5re0cMbfYYEUEuQj_M-lAE3Evk1p0h5rl2jXKjYBFPOPMfnoILyNQPbf4Dw33P9I2e19oqcmVZyvl0yEBiHk7_0bjnzzOBbQZIXYcVI9sc-PXERVUj97iBkVzmuZxGsJB9qzWotQZIEJS0mxqYexVSiYY3NKO6qgS0Rb0DLYefcp67EPP9czoGyTU231oOJBiZEfIqg-2-kF7ANzSWGO22AkttCUQtrf1Zb393s2cMgeIacoyFrA0i3l050uv7Rxbj_41ohPhm6U9oC9OQsq8LWAJimpb6VokhIqLkVCPJ6UYfrV_paWqGZdMd385fCpD4nJIKcKIYSZqQbo85MjMwcCfDgQNxBd9we2PLihXqPRMFcyXR1er6iC9nnE6tYUyEhzdPmf2hTknp87PaMwMhOX-P_mbwCvkZKpwmHDDZdK9orbuMFC9KBjSJDjs4tJYZ00RTLn9qJAvACNX8RzxUpabsFiPF51jRV7MChoCUlerkXeq5A3wfhBDL0-b63GlU1B55EaQFKtRo6ZjB8ssmLghBvsl-1MbJnZ22D-H8W6OD4hB9WFfFfc8mGupNrFTv6Q", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3132e734-4d70-4f83-ba0d-726434cf7de1", "record_id": "flaws_cloudtrail:0000336:3132e734-4d70-4f83-ba0d-726434cf7de1", "row_index": 336, "timestamp": "2018-04-18T03:59:06Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3132e734-4d70-4f83-ba0d-726434cf7de1", "eventTime": "2018-04-18T03:59:06Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a535867f-5ad9-4a50-9168-262ebaf641c0", "record_id": "flaws_cloudtrail:0000337:a535867f-5ad9-4a50-9168-262ebaf641c0", "row_index": 337, "timestamp": "2018-04-18T03:59:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1275, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a535867f-5ad9-4a50-9168-262ebaf641c0", "eventTime": "2018-04-18T03:59:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "268fe041-437c-4bb6-8c86-5bc32a83f979", "record_id": "flaws_cloudtrail:0000338:268fe041-437c-4bb6-8c86-5bc32a83f979", "row_index": 338, "timestamp": "2018-04-18T03:59:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "268fe041-437c-4bb6-8c86-5bc32a83f979", "eventTime": "2018-04-18T03:59:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a18c794-437f-4a31-8178-33a7773ab22a", "record_id": "flaws_cloudtrail:0000339:7a18c794-437f-4a31-8178-33a7773ab22a", "row_index": 339, "timestamp": "2018-04-18T03:59:07Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a18c794-437f-4a31-8178-33a7773ab22a", "eventTime": "2018-04-18T03:59:07Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "177f4d27-2b1c-4e52-b8fc-96041b58d13d", "record_id": "flaws_cloudtrail:0000340:177f4d27-2b1c-4e52-b8fc-96041b58d13d", "row_index": 340, "timestamp": "2018-04-18T03:59:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "177f4d27-2b1c-4e52-b8fc-96041b58d13d", "eventTime": "2018-04-18T03:59:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7757abc3-802c-4fd6-b0b2-efa3a9c8f3ea", "record_id": "flaws_cloudtrail:0000341:7757abc3-802c-4fd6-b0b2-efa3a9c8f3ea", "row_index": 341, "timestamp": "2018-04-18T03:59:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7757abc3-802c-4fd6-b0b2-efa3a9c8f3ea", "eventTime": "2018-04-18T03:59:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25fbac80-fecb-43ba-b0ef-c156f7b48c22", "record_id": "flaws_cloudtrail:0000342:25fbac80-fecb-43ba-b0ef-c156f7b48c22", "row_index": 342, "timestamp": "2018-04-18T03:59:08Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25fbac80-fecb-43ba-b0ef-c156f7b48c22", "eventTime": "2018-04-18T03:59:08Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cbb6eba-6e0a-4e5e-aa0e-9403f1410b6c", "record_id": "flaws_cloudtrail:0000343:7cbb6eba-6e0a-4e5e-aa0e-9403f1410b6c", "row_index": 343, "timestamp": "2018-04-18T03:59:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cbb6eba-6e0a-4e5e-aa0e-9403f1410b6c", "eventTime": "2018-04-18T03:59:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9def57c7-67c4-425c-bae5-b8af56fa484f", "record_id": "flaws_cloudtrail:0000344:9def57c7-67c4-425c-bae5-b8af56fa484f", "row_index": 344, "timestamp": "2018-04-18T03:59:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9def57c7-67c4-425c-bae5-b8af56fa484f", "eventTime": "2018-04-18T03:59:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 6UwInIMYGaJKS2uK8naNR-C6R_qRwyaoMA4uk1iZhViH7hyje518Jvx3lQxFa6e0Oce4fynSlBh2d3D70eYkpwl7_0RGinwGBW8Jcc2b9O3PPS83DC0nwXhRRmMzq1rsof0E_iEQqPTKOl9QmoYS1cTN-yCKH2gtvtqapvXqY4IHdhxP7w5PXxT7lEXfzW2UcjtGB5546Lj5vFXMBinssidQZkHRNv2cULaOdikU5VahUMmuWaiSPYAbqRCR2pLIx8vuc7KDdxV4eHBspZ8DdTTr6nVEDXqDjOuMldSs2_p0QVqXCzERo8Qmu3adHR8hXq1ze73Ikh3TZz0vC7UyD9teyDmZ-KQuq3ZydWnKHGzFxd2G1Vq1VzyYVBnqK9quAIQIHnMO7oTnvLpjocgKSHki0U2Qm5c25AdSknHjdZ1amOCvkwzNh_6OMm7NEWlY67Z-wx9Ouxg43EbPzUn-BxSgrmGp_Dnx092DXtQxZaQEw8xP_pe_Hds4j10I3oG5_kIH9QOw3e68ylInynTiCJctUn4bq3Mn5Rxm__EXnLyA019v75Ab5oGkcDwO_oA9KGgwnEfKvS4PEsIA0G1wAb8MirTbkJ_RIjLaKTinlqdxf1vF9xNMS5_D1iGFLnDNK_SHuVqNYZd1N8xnxt_NX4VN4wgUNahms28", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf470a06-2100-489c-a728-7f296159fea4", "record_id": "flaws_cloudtrail:0000345:cf470a06-2100-489c-a728-7f296159fea4", "row_index": 345, "timestamp": "2018-04-18T03:59:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf470a06-2100-489c-a728-7f296159fea4", "eventTime": "2018-04-18T03:59:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99b7c849-e95c-4bbd-ab22-fc30ab5631a6", "record_id": "flaws_cloudtrail:0000346:99b7c849-e95c-4bbd-ab22-fc30ab5631a6", "row_index": 346, "timestamp": "2018-04-18T03:59:10Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99b7c849-e95c-4bbd-ab22-fc30ab5631a6", "eventTime": "2018-04-18T03:59:10Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2b3e6ae-b1ae-42e8-a6e1-2b4e83b6106e", "record_id": "flaws_cloudtrail:0000347:a2b3e6ae-b1ae-42e8-a6e1-2b4e83b6106e", "row_index": 347, "timestamp": "2018-04-18T03:59:10Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2b3e6ae-b1ae-42e8-a6e1-2b4e83b6106e", "eventTime": "2018-04-18T03:59:10Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9c8a491-782a-4200-8782-8c9c5383cdb4", "record_id": "flaws_cloudtrail:0000348:a9c8a491-782a-4200-8782-8c9c5383cdb4", "row_index": 348, "timestamp": "2018-04-18T03:59:10Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9c8a491-782a-4200-8782-8c9c5383cdb4", "eventTime": "2018-04-18T03:59:10Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85cd15aa-aa90-4485-9354-62cb77aab46f", "record_id": "flaws_cloudtrail:0000349:85cd15aa-aa90-4485-9354-62cb77aab46f", "row_index": 349, "timestamp": "2018-04-18T03:59:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85cd15aa-aa90-4485-9354-62cb77aab46f", "eventTime": "2018-04-18T03:59:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11f4994c-20c6-4401-9926-8d87276c93f", "record_id": "flaws_cloudtrail:0000350:11f4994c-20c6-4401-9926-8d87276c93f", "row_index": 350, "timestamp": "2018-04-18T03:59:11Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11f4994c-20c6-4401-9926-8d87276c93f", "eventTime": "2018-04-18T03:59:11Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "349ccb04-fd5c-40f9-a941-f3fa464455d86", "record_id": "flaws_cloudtrail:0000351:349ccb04-fd5c-40f9-a941-f3fa464455d86", "row_index": 351, "timestamp": "2018-04-18T03:59:11Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "349ccb04-fd5c-40f9-a941-f3fa464455d86", "eventTime": "2018-04-18T03:59:11Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87f5ff40-7705-4dfe-8cc8-0f8c1327c5ce", "record_id": "flaws_cloudtrail:0000352:87f5ff40-7705-4dfe-8cc8-0f8c1327c5ce", "row_index": 352, "timestamp": "2018-04-18T03:59:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87f5ff40-7705-4dfe-8cc8-0f8c1327c5ce", "eventTime": "2018-04-18T03:59:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1efe60f-3920-4e94-b2a0-fd68a2a707b5", "record_id": "flaws_cloudtrail:0000353:b1efe60f-3920-4e94-b2a0-fd68a2a707b5", "row_index": 353, "timestamp": "2018-04-18T03:59:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1efe60f-3920-4e94-b2a0-fd68a2a707b5", "eventTime": "2018-04-18T03:59:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa5e5d64-dee3-40e7-8ddc-cb312dfa1822", "record_id": "flaws_cloudtrail:0000354:aa5e5d64-dee3-40e7-8ddc-cb312dfa1822", "row_index": 354, "timestamp": "2018-04-18T03:59:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa5e5d64-dee3-40e7-8ddc-cb312dfa1822", "eventTime": "2018-04-18T03:59:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b80a16f3-6dc7-46fa-8026-ee09b1bca1d3", "record_id": "flaws_cloudtrail:0000355:b80a16f3-6dc7-46fa-8026-ee09b1bca1d3", "row_index": 355, "timestamp": "2018-04-18T03:59:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b80a16f3-6dc7-46fa-8026-ee09b1bca1d3", "eventTime": "2018-04-18T03:59:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d88d8c0-0dd4-4aa0-9418-632561bc4", "record_id": "flaws_cloudtrail:0000356:0d88d8c0-0dd4-4aa0-9418-632561bc4", "row_index": 356, "timestamp": "2018-04-18T03:59:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d88d8c0-0dd4-4aa0-9418-632561bc4", "eventTime": "2018-04-18T03:59:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cf23644-5e84-42d3-8bcf-624cda76406f", "record_id": "flaws_cloudtrail:0000357:5cf23644-5e84-42d3-8bcf-624cda76406f", "row_index": 357, "timestamp": "2018-04-18T03:59:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cf23644-5e84-42d3-8bcf-624cda76406f", "eventTime": "2018-04-18T03:59:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed16edbb-3587-442f-89e0-b86728feda40", "record_id": "flaws_cloudtrail:0000358:ed16edbb-3587-442f-89e0-b86728feda40", "row_index": 358, "timestamp": "2018-04-18T03:59:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed16edbb-3587-442f-89e0-b86728feda40", "eventTime": "2018-04-18T03:59:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: o6ObeGefkMrRCe6HSuSJCxUPnjHNFLpKe1kdtA-ciN1LbdRfVIB_v2gc41-EO0A5zPi2ldkOR6cYwPZTu8MGPPUsujYKoDzoLqgd2EsXC8MKfnTgHMTP6zDJkxFWXXG1UQDJ3yHH588FvKkVrjKT4npdV3B0SDzVHgmseHXdj-hyjugfhfCDgAhkqYZOgJ7cT2pH3M8xPrAKLI41k9UpQwhf-MynF42fUsBgjch7kl3cO10uh3M7mNy6uzOWz5KXG68g16B2vgyliPFWy4YdhhBObuk8_sFE7IawvNJl2mpXV8EX7frdIekbdpix1onNq9x9cY4e03TqF3Uvdqe9UOrGvfqmB32z4oxDfVBglHioiBsTHph-59lgKFzJ9PT2_UDkahvQzxv3b4biUbKt8zv8_OmUzto_iAortzEIVPGZvmonhLj4sBKISbNwjMFVeYN4h28u6e3F9Ejz_IScQkDTk6Bu0SmveLOWB4lqxbcu-7oK_b3BBCYvNpB_oEJXnoA9wWPz7ddyd4hFbztjxJaIUNNt-rJ4xcRlDqK31DZLhk1F1OvQYmh0--KolAQADG3WCodoix0RwDqKyqwHfAFBKb_3hUTZ4aAGbuR9dxKjLEyqmOJJBj9d4TJDKopcF0t6HlsHAJvyLaWLmFnqPZ7pDy5ydAW8XKw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d08abba6-c2f0-4b26-87c5-2569d92091f", "record_id": "flaws_cloudtrail:0000359:d08abba6-c2f0-4b26-87c5-2569d92091f", "row_index": 359, "timestamp": "2018-04-18T03:59:14Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d08abba6-c2f0-4b26-87c5-2569d92091f", "eventTime": "2018-04-18T03:59:14Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ad5d022-9ee9-4597-816d-43c22b8629ee", "record_id": "flaws_cloudtrail:0000360:0ad5d022-9ee9-4597-816d-43c22b8629ee", "row_index": 360, "timestamp": "2018-04-18T03:59:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ad5d022-9ee9-4597-816d-43c22b8629ee", "eventTime": "2018-04-18T03:59:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54e2c792-7743-4255-a747-81e4ec22802", "record_id": "flaws_cloudtrail:0000361:54e2c792-7743-4255-a747-81e4ec22802", "row_index": 361, "timestamp": "2018-04-18T03:59:14Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54e2c792-7743-4255-a747-81e4ec22802", "eventTime": "2018-04-18T03:59:14Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4294cc98-ee15-4790-b4b6-9d758c9476ab", "record_id": "flaws_cloudtrail:0000362:4294cc98-ee15-4790-b4b6-9d758c9476ab", "row_index": 362, "timestamp": "2018-04-18T03:59:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1829, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4294cc98-ee15-4790-b4b6-9d758c9476ab", "eventTime": "2018-04-18T03:59:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: QJbrS_aFdsNPzjoiy8Bmcw6P2RznKb8BMGGII3wDAQbArloCMw0pivKW-zFidAS6bW6Kj6ncvp-SHAv3Jba9FLkwyk0Yy4uEtQMtzJfTQs6ys32eYdfGRgqHern_7KJPZIl2_gxgRDYsb5X943dzyEnwlLCfyl0IHwfTGSfGgz6tDoIXS4i3xE_0GBRHJE63o4yB6wEzoMmVbNfnUuZaNJaxnV_dF0wbtM9NFDazH99nKlPus-2PgmwQRLskPkIn-EOp7dxpuWfEz8_3r5yI39aX8QSE1qa8lT6wbyGuuKBXxuqMsCS-PbwV5MAi0KRCkUK1nnMCr49oNaJKIz9yVU5LzqubAqq16nSTHQMlFD8ky5NW3sL3LUcNtDRNr4PmYI_UiNjSVeMtyHfZTpiqjWVEvPWDqTCUiWmfWoJgEHMbk0v1G3MXw-QQIPfQYVSKk5jg0L2aKUJliGko71kb7i6imldiFgst3AF_YCn2nEOzCCswgwXRmYn-UQc9gbJW8Xd5IlmpC5chXbq645PF-lCeB03udFryjOsdF9pDfi_t5PzvFUWPeV5Gzeyht2Ov7APeVwn5IBdbiGmnz_VvuTVCh0uSnImggXJzeHzCF7iDbblRuOFc4wp4K_c3JVROGljGgZbKVJ5_wksdzYxANaS14nsYclF1RCM", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f9f4c35-f1e0-4b03-a217-fd235410ab", "record_id": "flaws_cloudtrail:0000363:6f9f4c35-f1e0-4b03-a217-fd235410ab", "row_index": 363, "timestamp": "2018-04-18T03:59:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f9f4c35-f1e0-4b03-a217-fd235410ab", "eventTime": "2018-04-18T03:59:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef268845b-50db-4d50-9cf9-18dbb278c510", "record_id": "flaws_cloudtrail:0000364:ef268845b-50db-4d50-9cf9-18dbb278c510", "row_index": 364, "timestamp": "2018-04-18T03:59:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef268845b-50db-4d50-9cf9-18dbb278c510", "eventTime": "2018-04-18T03:59:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a828829ed-0a77-4a95-8112-616ee4f1aa87", "record_id": "flaws_cloudtrail:0000365:a828829ed-0a77-4a95-8112-616ee4f1aa87", "row_index": 365, "timestamp": "2018-04-18T03:59:16Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a828829ed-0a77-4a95-8112-616ee4f1aa87", "eventTime": "2018-04-18T03:59:16Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eee06a79-c0cf-4c89-841e-ff3194d2a601", "record_id": "flaws_cloudtrail:0000366:eee06a79-c0cf-4c89-841e-ff3194d2a601", "row_index": 366, "timestamp": "2018-04-18T03:59:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eee06a79-c0cf-4c89-841e-ff3194d2a601", "eventTime": "2018-04-18T03:59:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "437553c-c0d4-4e1f-b699-b72efb60ceac", "record_id": "flaws_cloudtrail:0000367:437553c-c0d4-4e1f-b699-b72efb60ceac", "row_index": 367, "timestamp": "2018-04-18T03:59:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "437553c-c0d4-4e1f-b699-b72efb60ceac", "eventTime": "2018-04-18T03:59:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: R7HQ_c5UHZGAUnoDglVc4ap9sVn6XK2bz0-u_PlPqZZ3ssvqNnT9y31hdp0EQGTxJTp5cgvIVvD3sxbqpVClOQNjzap85wlysxb2UT0j9UW4uLMBavbsZiFBfkolj03AsLTCmBPpq2q2iD3K16EAPeANrKyEn6c-4zcSsumm8nvzh88SI-4nIFUAyM6egha-mL7RIj8GEska8bSZ8CaaGFwL8g4vTS0F-I5wHp24l5tG0QMPVnCuBFSKXtUmz-rpZaitXuwPSp5bwg7ej_uaorwPKeIp2VaBNztOEsxpFsnKq5XdSIGIhx5eaL4YFpcLjTnyYAq_FKkunhatyzVLMaL7Qi1oFoVgfp05pfYUGplkiE9bZSTyw0yMysPeYiCx1gm33qTc0x2Ljx4tOEUuP7i867k43hV9XrkvjLoVax5PmB0p_BO1hD3MJ-fpjMLw3gQ3ZURtZEExPdCziHtXF14qIEsFrOH2d1MLnpfaJUnldj8gMCKS-sHDIF1MkYsBRiZ6qFA0xU7UzYdZjS_VxrKm2Sxjj3aodb0vVEYEbKvnOwQsIPzDPpvzjei423dCMMfcTxLP_ZDHDVal5eygSLKufSE0uniGi5AY81iwlQIOaVNJjW2OZtfyOYasvPvIfha59NDhtnYbkXcsuRRNs2htHdvuovkk4Tw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ab5adb2-27ef-4a98-a599-5d4a943753ca", "record_id": "flaws_cloudtrail:0000368:8ab5adb2-27ef-4a98-a599-5d4a943753ca", "row_index": 368, "timestamp": "2018-04-18T03:59:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ab5adb2-27ef-4a98-a599-5d4a943753ca", "eventTime": "2018-04-18T03:59:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "553d99ed-1fe8-466a-92b0-12c254e8469d", "record_id": "flaws_cloudtrail:0000369:553d99ed-1fe8-466a-92b0-12c254e8469d", "row_index": 369, "timestamp": "2018-04-18T03:59:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "553d99ed-1fe8-466a-92b0-12c254e8469d", "eventTime": "2018-04-18T03:59:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18721b4e-2cc1-4afc-bbf8-81ec973a8842", "record_id": "flaws_cloudtrail:0000370:18721b4e-2cc1-4afc-bbf8-81ec973a8842", "row_index": 370, "timestamp": "2018-04-18T03:59:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18721b4e-2cc1-4afc-bbf8-81ec973a8842", "eventTime": "2018-04-18T03:59:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "835080d56-d214-47c4-9f2c-83bfd832a27c", "record_id": "flaws_cloudtrail:0000371:835080d56-d214-47c4-9f2c-83bfd832a27c", "row_index": 371, "timestamp": "2018-04-18T03:59:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "835080d56-d214-47c4-9f2c-83bfd832a27c", "eventTime": "2018-04-18T03:59:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5ae69f0-64d9-4b0b-b724-c7278a55815", "record_id": "flaws_cloudtrail:0000372:c5ae69f0-64d9-4b0b-b724-c7278a55815", "row_index": 372, "timestamp": "2018-04-18T03:59:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5ae69f0-64d9-4b0b-b724-c7278a55815", "eventTime": "2018-04-18T03:59:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "339df527-b63c-4b0a-ad49-744530c961095", "record_id": "flaws_cloudtrail:0000373:339df527-b63c-4b0a-ad49-744530c961095", "row_index": 373, "timestamp": "2018-04-18T03:59:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "339df527-b63c-4b0a-ad49-744530c961095", "eventTime": "2018-04-18T03:59:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b99951dc-769a-4144-8adc-058f8a06f5fd", "record_id": "flaws_cloudtrail:0000374:b99951dc-769a-4144-8adc-058f8a06f5fd", "row_index": 374, "timestamp": "2018-04-18T03:59:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b99951dc-769a-4144-8adc-058f8a06f5fd", "eventTime": "2018-04-18T03:59:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54752ab3-6a22-43cc-8efd-eadbf729f984", "record_id": "flaws_cloudtrail:0000375:54752ab3-6a22-43cc-8efd-eadbf729f984", "row_index": 375, "timestamp": "2018-04-18T03:59:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1834, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54752ab3-6a22-43cc-8efd-eadbf729f984", "eventTime": "2018-04-18T03:59:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GFmGsm-A0VkgQHde8VrKWbAkgQ9Q78oQYN4kydUA0aO_hXyo873C3FzF0rVCx2UTjXObKTO95Iuiocq-OiERG_Z9tEb4VhMDTnIdDgeiIrc-JoVceI0jtGaX821WE1h7xqSDt1a6Adig2TS9elW_PnDRNoHu_D-8TM2b7PZCA3hqheBbPv_wmIvhYwYTYA6cjkC2VP5ZRwIiNmHrMmfX_20kBeiym9ExClKBVQxgp5Ps2cnoRqQQquDvCP8U4T1ifJrgP7ZPrt4h-cEZu5E3fwBQ1Z3sbADxQXhswUexzQKOGpBTESsxciBdP30uYNruRCOrFzTUvZfh0UY6PyWU7L1prNT00Q6sdv_2EF1jWBAzeHh3Rxcd-cr9rQfFcBzYJLLt-Bn-qp8vSh9egTo8kvL2JXqkXws4jtlKprnqL6jd3zyXEBfir8SgwwIi4b1NLZ1R9dhkz80t6qFs0RYIpbzh3HBRhMV9tscvA3hSiW1bQ_srSb39nOhgoabkQ10CBiOH2EkUJAp7gX-9f2F5980Lo7DGfIQDVBDxqyTjTitCv4lTvkkBXvU0Pmjgsl-7hR9BwYKAJ1J5UQeOsoCFd09vJ3wOIlte8EF9FxYlIBMckIAM27lDU8U0jwJ3du7vqlSRbkRqn6T1WA6nyHp-018HLoVAtcU7zxa0", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "238cf5bf-20d4-4601-9423-f27890bc5212", "record_id": "flaws_cloudtrail:0000376:238cf5bf-20d4-4601-9423-f27890bc5212", "row_index": 376, "timestamp": "2018-04-18T03:59:21Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "238cf5bf-20d4-4601-9423-f27890bc5212", "eventTime": "2018-04-18T03:59:21Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1135bf27-79c1-46ea-9222-a7b344fbe42b", "record_id": "flaws_cloudtrail:0000377:1135bf27-79c1-46ea-9222-a7b344fbe42b", "row_index": 377, "timestamp": "2018-04-18T03:59:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1135bf27-79c1-46ea-9222-a7b344fbe42b", "eventTime": "2018-04-18T03:59:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 9dpOZCSsz3mU_7XoNpUVn-XgsQiORFawLr6S3PjtBm2ZElmCp_XAZILLnHgAabR2onfEe8EurEQ2xMTd0lA6zq2uiwR7RwiKSvi3KKhL0tmCmnI5IiqKpc_irFJ0ELmVjHMbo9K2MnAwCvJbGA6l7SbStKKfYtyAq7fDBOmT_Om2rxbzfn4w4DHrjXOyCg_lbXmbjGl1lVq9xJepkZGrfZw0Ut7x-xOVTFHSlbxWPnWr22G01RD7LxnzREux_A_dDfs-ssJd64Ka5l4QlKRwa0LeBf4LedIQ9qkmi-mI0xb0YIXOCXOdZK-sgkRcVLp5tD5EtthtljI_HXaN8UGHRDaV76dfNAbV6eulus_GM7lK9vmnGylV5qzvW4eyahnSR0H4KSBU6ltucKFeyzYAB2F8tZOMjjYYH96kQvK3dwTy9OIDrMyOyvSpfdgUMwH9zg71xM39ZIontRkU2hAfatLPaJo2y7abuAlNjnI4hZZWoXV7igSRSJve3mmw41Yn0bpg3P2yq6DCt_A3urfDtzOW-Z2_f5rZDSDVOAozkpnSGF98KJ-kPdO8DC98xVOrH8xier_-lpJmpkbi2RP37liI89irJjV6PzVOs13VJwPBC6DfMEWw6WJMg-44eIv7ddZU4QjrMZzO_a3hvzeOgwxoOeWqbkfvFQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e2f967e-5f9c-4ce0-9dc3-7ffdb6e0d611", "record_id": "flaws_cloudtrail:0000378:4e2f967e-5f9c-4ce0-9dc3-7ffdb6e0d611", "row_index": 378, "timestamp": "2018-04-18T03:59:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e2f967e-5f9c-4ce0-9dc3-7ffdb6e0d611", "eventTime": "2018-04-18T03:59:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d184f123-411f-48aa-a797-33ea00fb932f", "record_id": "flaws_cloudtrail:0000379:d184f123-411f-48aa-a797-33ea00fb932f", "row_index": 379, "timestamp": "2018-04-18T03:59:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d184f123-411f-48aa-a797-33ea00fb932f", "eventTime": "2018-04-18T03:59:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ff8c488-fe78-4151-9bf2-59046fd3b4bf", "record_id": "flaws_cloudtrail:0000380:3ff8c488-fe78-4151-9bf2-59046fd3b4bf", "row_index": 380, "timestamp": "2018-04-18T03:59:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1172, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ff8c488-fe78-4151-9bf2-59046fd3b4bf", "eventTime": "2018-04-18T03:59:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2355f31e-30f3-47f5-b01f-963f3122b9b8", "record_id": "flaws_cloudtrail:0000381:2355f31e-30f3-47f5-b01f-963f3122b9b8", "row_index": 381, "timestamp": "2018-04-18T03:59:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2355f31e-30f3-47f5-b01f-963f3122b9b8", "eventTime": "2018-04-18T03:59:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Cyu_grfG75mhMVCQ0l2qrXQpzPyVkJ7MNfzfeHm2H-_TE_OWqFBEMZxSCwolUt7YXoO4FkLM8K30tFv-vZEM1X8TNefoUonS7l2-bMw0pb1Zjtm1eJ3GMSmM31EF77LBpML7uz04jHlpO_LX9esMIZhkPIbRkiC1jruAEv_N0dwm7_7GZ40wWgbWiUsNoYcyzZqJn8Z_3cZUERN5QWOsCFmDebMIqxAEmBhAZIeRnD5pxlGkGmt84OCYDz_yXmqYkaZGhpNm4-BAzYqULXGX0hsx-qn7NE1ZCWnQ-9ZjKv3tgveEY1jW0-TEqjmss8U5khSTEZBY24CImKuakFU4ogF1n320jy3cP0ydkSARon9ldBpwpuhPtKmNyja-9eho8mfl80LC9cDr9tMuL8eC8Jr4Mw8Og9ArBQ97aiLT9WceXT8pSGGGVbKakoFSPQ4rbEMxPpw6Q5upGTsU5rPX-gz92NvkJ9tZoJ3afHf8XPaFBCdxNGukK27ZH86dycYSK8pxjHzrJqXu-9ITED9YZZ65uRsTRlAMskSpnLh_N_-Af3SA51k1kYNxsDyS6dt7jlLUYE1trmmffzQd1IM-VkCHkWROqN4EVTzf0u0U-ZZmO9kJ_du-sDbebvBgRXFlbaQWLiXm86WsReM1N4ZXQzJNA9_r_agnNOg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a7f13c3-2abf-47bb-ae43-c63ce42d6ebd", "record_id": "flaws_cloudtrail:0000382:4a7f13c3-2abf-47bb-ae43-c63ce42d6ebd", "row_index": 382, "timestamp": "2018-04-18T04:00:12Z", "event_type": "UpdateTrail", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIALOWQ6USGIJE743CL", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.151.116.82", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-3496"], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a7f13c3-2abf-47bb-ae43-c63ce42d6ebd", "eventTime": "2018-04-18T04:00:12Z", "eventName": "UpdateTrail", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.151.116.82", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIALOWQ6USGIJE743CL", "userName": "backup"}, "requestParameters": {"name": "trail-3496", "isMultiRegionTrail": false, "enableLogFileValidation": false}, "resources": [{"ARN": "arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-3496"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60bdac22-6f4d-4fdf-88c8-0925e66fe43f", "record_id": "flaws_cloudtrail:0000383:60bdac22-6f4d-4fdf-88c8-0925e66fe43f", "row_index": 383, "timestamp": "2018-04-18T04:01:03Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1491, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60bdac22-6f4d-4fdf-88c8-0925e66fe43f", "eventTime": "2018-04-18T04:01:03Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIACIPS243QH3STEX35", "expiration": "Apr 18, 2018 10:32:19 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a933429a0-789c-444b-bf7a-52c90382770c", "record_id": "flaws_cloudtrail:0000384:a933429a0-789c-444b-bf7a-52c90382770c", "row_index": 384, "timestamp": "2018-04-18T04:06:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a933429a0-789c-444b-bf7a-52c90382770c", "eventTime": "2018-04-18T04:06:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "030ebbca-a586-443a-ba31-190d87e113b4", "record_id": "flaws_cloudtrail:0000385:030ebbca-a586-443a-ba31-190d87e113b4", "row_index": 385, "timestamp": "2018-04-18T04:06:11Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "030ebbca-a586-443a-ba31-190d87e113b4", "eventTime": "2018-04-18T04:06:11Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bb2b458-d769-4e48-b5c7-82351f032c6c", "record_id": "flaws_cloudtrail:0000386:5bb2b458-d769-4e48-b5c7-82351f032c6c", "row_index": 386, "timestamp": "2018-04-18T04:06:12Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bb2b458-d769-4e48-b5c7-82351f032c6c", "eventTime": "2018-04-18T04:06:12Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "638344-a179-49ec-89e6-e4a1fd7ce6fc", "record_id": "flaws_cloudtrail:0000387:638344-a179-49ec-89e6-e4a1fd7ce6fc", "row_index": 387, "timestamp": "2018-04-18T04:06:12Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "638344-a179-49ec-89e6-e4a1fd7ce6fc", "eventTime": "2018-04-18T04:06:12Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b72d843-9075-41f0-94d7-e5c2a8abb138", "record_id": "flaws_cloudtrail:0000388:9b72d843-9075-41f0-94d7-e5c2a8abb138", "row_index": 388, "timestamp": "2018-04-18T04:06:13Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b72d843-9075-41f0-94d7-e5c2a8abb138", "eventTime": "2018-04-18T04:06:13Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fc54cff-49be-41a1-a52e-5e1512178b3d", "record_id": "flaws_cloudtrail:0000389:3fc54cff-49be-41a1-a52e-5e1512178b3d", "row_index": 389, "timestamp": "2018-04-18T04:06:13Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fc54cff-49be-41a1-a52e-5e1512178b3d", "eventTime": "2018-04-18T04:06:13Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14bb277d-8605-43e9-952b-2923fbd72817", "record_id": "flaws_cloudtrail:0000390:14bb277d-8605-43e9-952b-2923fbd72817", "row_index": 390, "timestamp": "2018-04-18T04:06:13Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14bb277d-8605-43e9-952b-2923fbd72817", "eventTime": "2018-04-18T04:06:13Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42b6c395-50b9-419e-abd1-423a844a8c02", "record_id": "flaws_cloudtrail:0000391:42b6c395-50b9-419e-abd1-423a844a8c02", "row_index": 391, "timestamp": "2018-04-18T04:06:16Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42b6c395-50b9-419e-abd1-423a844a8c02", "eventTime": "2018-04-18T04:06:16Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b3a69e1-a834-4c70-a354-cf099471e7d", "record_id": "flaws_cloudtrail:0000392:3b3a69e1-a834-4c70-a354-cf099471e7d", "row_index": 392, "timestamp": "2018-04-18T04:06:16Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b3a69e1-a834-4c70-a354-cf099471e7d", "eventTime": "2018-04-18T04:06:16Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "709e1a52-3d8f-4be5-8d68-6e6e8cfb49fa", "record_id": "flaws_cloudtrail:0000393:709e1a52-3d8f-4be5-8d68-6e6e8cfb49fa", "row_index": 393, "timestamp": "2018-04-18T04:06:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "709e1a52-3d8f-4be5-8d68-6e6e8cfb49fa", "eventTime": "2018-04-18T04:06:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7f42bf0-6b63-4d86-aa23-8a189054eea7", "record_id": "flaws_cloudtrail:0000394:f7f42bf0-6b63-4d86-aa23-8a189054eea7", "row_index": 394, "timestamp": "2018-04-18T04:06:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7f42bf0-6b63-4d86-aa23-8a189054eea7", "eventTime": "2018-04-18T04:06:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2eee782-731a-4062-858a-00fe9871d8f0", "record_id": "flaws_cloudtrail:0000395:b2eee782-731a-4062-858a-00fe9871d8f0", "row_index": 395, "timestamp": "2018-04-18T04:06:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2eee782-731a-4062-858a-00fe9871d8f0", "eventTime": "2018-04-18T04:06:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28f094ac-389d-42f3-acaa-dd7cae0f1aeb", "record_id": "flaws_cloudtrail:0000396:28f094ac-389d-42f3-acaa-dd7cae0f1aeb", "row_index": 396, "timestamp": "2018-04-18T04:06:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28f094ac-389d-42f3-acaa-dd7cae0f1aeb", "eventTime": "2018-04-18T04:06:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39e816a3-2766-4039-9ab3-a0923c65dd04", "record_id": "flaws_cloudtrail:0000397:39e816a3-2766-4039-9ab3-a0923c65dd04", "row_index": 397, "timestamp": "2018-04-18T04:06:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39e816a3-2766-4039-9ab3-a0923c65dd04", "eventTime": "2018-04-18T04:06:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b18d9377-819a-46ed-9fdf-b5889e37a4c4", "record_id": "flaws_cloudtrail:0000398:b18d9377-819a-46ed-9fdf-b5889e37a4c4", "row_index": 398, "timestamp": "2018-04-18T04:06:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b18d9377-819a-46ed-9fdf-b5889e37a4c4", "eventTime": "2018-04-18T04:06:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b239edd-947b-4a45-a80c-859f8ea6896d", "record_id": "flaws_cloudtrail:0000399:5b239edd-947b-4a45-a80c-859f8ea6896d", "row_index": 399, "timestamp": "2018-04-18T04:06:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b239edd-947b-4a45-a80c-859f8ea6896d", "eventTime": "2018-04-18T04:06:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa45698d-d910-445c-831a-020d2fe910e6", "record_id": "flaws_cloudtrail:0000400:fa45698d-d910-445c-831a-020d2fe910e6", "row_index": 400, "timestamp": "2018-04-18T04:06:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa45698d-d910-445c-831a-020d2fe910e6", "eventTime": "2018-04-18T04:06:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b59701-24fc-46f4-a71f-66bc32228968", "record_id": "flaws_cloudtrail:0000401:9b59701-24fc-46f4-a71f-66bc32228968", "row_index": 401, "timestamp": "2018-04-18T04:06:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b59701-24fc-46f4-a71f-66bc32228968", "eventTime": "2018-04-18T04:06:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "254d2e58-8c83-4dbd-a025-4a4cffd6ebf4", "record_id": "flaws_cloudtrail:0000402:254d2e58-8c83-4dbd-a025-4a4cffd6ebf4", "row_index": 402, "timestamp": "2018-04-18T04:06:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "254d2e58-8c83-4dbd-a025-4a4cffd6ebf4", "eventTime": "2018-04-18T04:06:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5394f2ef-797b-49e5-9416-0b61f36a1da0", "record_id": "flaws_cloudtrail:0000403:5394f2ef-797b-49e5-9416-0b61f36a1da0", "row_index": 403, "timestamp": "2018-04-18T04:06:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5394f2ef-797b-49e5-9416-0b61f36a1da0", "eventTime": "2018-04-18T04:06:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78bd9436-57a0-46a4-9598-01d12ba657007", "record_id": "flaws_cloudtrail:0000404:78bd9436-57a0-46a4-9598-01d12ba657007", "row_index": 404, "timestamp": "2018-04-18T04:06:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78bd9436-57a0-46a4-9598-01d12ba657007", "eventTime": "2018-04-18T04:06:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24c178a0-0694-4f89-b8b7-165baa56c917", "record_id": "flaws_cloudtrail:0000405:24c178a0-0694-4f89-b8b7-165baa56c917", "row_index": 405, "timestamp": "2018-04-18T04:06:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24c178a0-0694-4f89-b8b7-165baa56c917", "eventTime": "2018-04-18T04:06:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6833da55-4626-4862-91d7-3f94b63f4546", "record_id": "flaws_cloudtrail:0000406:6833da55-4626-4862-91d7-3f94b63f4546", "row_index": 406, "timestamp": "2018-04-18T04:06:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6833da55-4626-4862-91d7-3f94b63f4546", "eventTime": "2018-04-18T04:06:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f104f86-15ae-457f-bdb1-61781f", "record_id": "flaws_cloudtrail:0000407:6f104f86-15ae-457f-bdb1-61781f", "row_index": 407, "timestamp": "2018-04-18T04:06:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1273, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f104f86-15ae-457f-bdb1-61781f", "eventTime": "2018-04-18T04:06:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad4a2c2a-eea1-4dc3-9c73-2c94670b99c7", "record_id": "flaws_cloudtrail:0000408:ad4a2c2a-eea1-4dc3-9c73-2c94670b99c7", "row_index": 408, "timestamp": "2018-04-18T04:06:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad4a2c2a-eea1-4dc3-9c73-2c94670b99c7", "eventTime": "2018-04-18T04:06:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c56ef93-48e2-47a8-adfe-acfdc6a9b073", "record_id": "flaws_cloudtrail:0000409:4c56ef93-48e2-47a8-adfe-acfdc6a9b073", "row_index": 409, "timestamp": "2018-04-18T04:06:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c56ef93-48e2-47a8-adfe-acfdc6a9b073", "eventTime": "2018-04-18T04:06:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e90b8e96-4686-4634-84ea-dd9bf302d9ba", "record_id": "flaws_cloudtrail:0000410:e90b8e96-4686-4634-84ea-dd9bf302d9ba", "row_index": 410, "timestamp": "2018-04-18T04:06:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1169, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e90b8e96-4686-4634-84ea-dd9bf302d9ba", "eventTime": "2018-04-18T04:06:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2044a556-4bf6-4273-9a69-aaa7a789bc38", "record_id": "flaws_cloudtrail:0000411:2044a556-4bf6-4273-9a69-aaa7a789bc38", "row_index": 411, "timestamp": "2018-04-18T04:06:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2044a556-4bf6-4273-9a69-aaa7a789bc38", "eventTime": "2018-04-18T04:06:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: _kMEoV-bqs1HrIkzj6nV2dn7l6CT2-ECPYQJx8PLQuWUu1oosJUgLpiGt-ZxdSpv77YN5ZvLKXwKoSzCh2Bxtq0Q_CFUgkuwCWOSv4P0G6ket4q1IGQ2f5U7UZlRwNowvbEmmiSsSsR5HMeZ9_zipKVAwxijIQtItvicSQ82BR1CwxGRm36q1CvabxG1RZFX9u7jv8T-N-Qk0ycMqtqDTvQLA5YA3vLwnrCn2ECFCX2XxZ9-2q7uGXk5WiR8PDEHfDcnCrgxBviIyjfPptXvi6l2PBsEQNNxHg5iWtVwd2ER43SUe_zPucU-G8xqm5w1z7qtZybTj-aiBtwvPN8t_DegeWIL0wvrR5MptZ3ArjSp7ncB-ehlQQTJUmsAwQs6-oRaowK8zsQ8W0sX_VD9ktGJe71X1svDaI5Z4b4HzgX8Sn4AQRoWYMpN1pqQOmAU8h0a4Lh6drbKYua-m3BT591ea6ENVIS5Qqs0PdS-i--01Lrv2r_5D-VyGoKa1Bh3XHiccVM-RzQok5Y3QwbkELW8CCTw6mdNGy7QXrhdBwOnf4xZiwIuok7VaeK6_l5ZZySLgg6fuWiHGmjDJ5AyFerdPErjM-kXve0dwZIjc5QEY6kGc9id2arlQQzLx4MdOiZ9Uo2zhitBeGXzDPd5P2EzPc0CXXNo1A", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc49c20c-6d5c-4d3c-bf5d-b322f3ad17de", "record_id": "flaws_cloudtrail:0000412:cc49c20c-6d5c-4d3c-bf5d-b322f3ad17de", "row_index": 412, "timestamp": "2018-04-18T04:06:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc49c20c-6d5c-4d3c-bf5d-b322f3ad17de", "eventTime": "2018-04-18T04:06:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6008dbd5-c217-4e9e-9040-e1bb2ea90fd3", "record_id": "flaws_cloudtrail:0000413:6008dbd5-c217-4e9e-9040-e1bb2ea90fd3", "row_index": 413, "timestamp": "2018-04-18T04:06:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6008dbd5-c217-4e9e-9040-e1bb2ea90fd3", "eventTime": "2018-04-18T04:06:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52f84453-03c5-433f-a7ff-463fb073f5d8", "record_id": "flaws_cloudtrail:0000414:52f84453-03c5-433f-a7ff-463fb073f5d8", "row_index": 414, "timestamp": "2018-04-18T04:06:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52f84453-03c5-433f-a7ff-463fb073f5d8", "eventTime": "2018-04-18T04:06:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbd0c8aa-1273-4138-ad51-da94f33873", "record_id": "flaws_cloudtrail:0000415:fbd0c8aa-1273-4138-ad51-da94f33873", "row_index": 415, "timestamp": "2018-04-18T04:06:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbd0c8aa-1273-4138-ad51-da94f33873", "eventTime": "2018-04-18T04:06:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "737e8003-fe1f-48a1-987c-a83273e901bf", "record_id": "flaws_cloudtrail:0000416:737e8003-fe1f-48a1-987c-a83273e901bf", "row_index": 416, "timestamp": "2018-04-18T04:06:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "737e8003-fe1f-48a1-987c-a83273e901bf", "eventTime": "2018-04-18T04:06:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9980cf8f-5906-4047-84ab-97fdd03ebf1e", "record_id": "flaws_cloudtrail:0000417:9980cf8f-5906-4047-84ab-97fdd03ebf1e", "row_index": 417, "timestamp": "2018-04-18T04:06:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9980cf8f-5906-4047-84ab-97fdd03ebf1e", "eventTime": "2018-04-18T04:06:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb9620eb-9850-4b0c-a77a-c94eef2c52bf", "record_id": "flaws_cloudtrail:0000418:fb9620eb-9850-4b0c-a77a-c94eef2c52bf", "row_index": 418, "timestamp": "2018-04-18T04:06:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb9620eb-9850-4b0c-a77a-c94eef2c52bf", "eventTime": "2018-04-18T04:06:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21157b31-9db4-4691-800a-8140c789b717", "record_id": "flaws_cloudtrail:0000419:21157b31-9db4-4691-800a-8140c789b717", "row_index": 419, "timestamp": "2018-04-18T04:06:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21157b31-9db4-4691-800a-8140c789b717", "eventTime": "2018-04-18T04:06:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b62d4fd-40a1-4ec3-8571-882257be", "record_id": "flaws_cloudtrail:0000420:7b62d4fd-40a1-4ec3-8571-882257be", "row_index": 420, "timestamp": "2018-04-18T04:06:24Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b62d4fd-40a1-4ec3-8571-882257be", "eventTime": "2018-04-18T04:06:24Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "322647c-6f65-453f-8074-f101120a55a7e", "record_id": "flaws_cloudtrail:0000421:322647c-6f65-453f-8074-f101120a55a7e", "row_index": 421, "timestamp": "2018-04-18T04:06:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "322647c-6f65-453f-8074-f101120a55a7e", "eventTime": "2018-04-18T04:06:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: s2ang2_gAMM6VkmxnR1S1amxxoSGedBgw_egYWxFesjzhV4DM7oB7Gk_Pc91tBX7k3evj4BCKwYCpqtcZ-mxgKcncT01dfXNXvXjZqIkXpEk0drvuPQlFDzRtHDjtsIR4A5MQOoVmEFD_fwSIR-mu_HhQJdvmNxmGBbD0VbCmm6bw9HOx-sdNDrki1JHUiCZufXmlTbIqC49SrQz4EEIZMwYzro6GchM7-Gg9p86bpDBLTQMoWusT0olpPvWB0esLXVD9UaM9LclxJ8TyAu1LMVMZFV9KIz3bI8uLxb3NNVy1BxOAt91nA2X0fcSp8uDdipnNBPlyy3xcNbTB9yTpyLqoyeIRL53V-qoEXslrzhfDFklZ7YBNVFFf_qDRIX_0PGp8jAQhNK2gRgCmm3Ctl9rpqEVUqqdYolkv2st2GzC3_QlGqiPgfoFFdKiQ0bBocA0wIhf8mW5wl0ovOXlmk49EKeJNgFtkow4PMGiimj9IJyq76ji6zPfGyPn21vq95GCDVAI40urYruuersE4BkKsMn9ZdcrEcwzwCk3vQZeXOt2iYeoblT614kPP60DDD76YtlFWXU2tZTmK9TVNdDTE-0P_5SK9UK3oKTQe97QgGbF7O1jHzoiE7u2fu8U6Xc9BmVBo4NnbjXDAQz6NpPkXu18qSmxfw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5eaec743-6079-44cf-b406-db92a649c558", "record_id": "flaws_cloudtrail:0000422:5eaec743-6079-44cf-b406-db92a649c558", "row_index": 422, "timestamp": "2018-04-18T04:06:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5eaec743-6079-44cf-b406-db92a649c558", "eventTime": "2018-04-18T04:06:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dbc8e8f-c117-4ad8-a2f5-1987adfa146c", "record_id": "flaws_cloudtrail:0000423:3dbc8e8f-c117-4ad8-a2f5-1987adfa146c", "row_index": 423, "timestamp": "2018-04-18T04:06:25Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dbc8e8f-c117-4ad8-a2f5-1987adfa146c", "eventTime": "2018-04-18T04:06:25Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32a05310-fbb1-432a-a282-b16bccfd27c8", "record_id": "flaws_cloudtrail:0000424:32a05310-fbb1-432a-a282-b16bccfd27c8", "row_index": 424, "timestamp": "2018-04-18T04:06:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32a05310-fbb1-432a-a282-b16bccfd27c8", "eventTime": "2018-04-18T04:06:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "704a1277-08f9-4253-8a8f-b23616225b72", "record_id": "flaws_cloudtrail:0000425:704a1277-08f9-4253-8a8f-b23616225b72", "row_index": 425, "timestamp": "2018-04-18T04:06:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "704a1277-08f9-4253-8a8f-b23616225b72", "eventTime": "2018-04-18T04:06:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 47u3pKyiU35U9dSRuCyn3tOaRj_R-pMhV7VzcUsA-Vq3q62SFWxCNuaHj2P1ur4cF0FJM4yPbwbxu0dqZUvlMLNrTLmI4HWzq0d0mdhg5g-NrxlBbWk35kcEWJRiHvLu_SUyJbyT5RzcoxnrU34HJdm3wN3rk2wDdChgLmtv_OE43EsiSQnX_TDcvLcP3qYCuYZiTMIy4WZOScVBei38CAIh_8QDfCnFkvFhY5P3yHO4so7mXUTw3VeE_mD8hhPPD0T7Ko2ElGuO6RMeeCvTzaJI3iQuhc0eEojpxktK29Qf3nzti-94fMxiiYPpNC2UM3gWznU73RaGEVOzT8GDIeIJZghpsouJBnq2EQenrRdBx1VKb9PehkPP6LxEw0EcBfPwACpHChZRvcfFrtu971GrGP0K09PYWaeFQu66r9Iv7TVnfnem3zAa5KuS4bAAlxqwlzEjfhEE9Iy4pNrWSOBEeZShHkRbcy7RvhJp0fFZ6-fWBlLb5KdRN_aV63PozbweJ62U7aymhrPnGobInaU25NzqYwUbtaidZbDvlKPt2AaXS322Twj73jQ_ZsYa3NuCr1TFWUhKuVZHg2IEVFYarSlyNycC8jWBg0zYPHn5hwodeabLWi37cPlz12HbuKa9pm-UZbwnzjbzRecEYNVibuyyukNom5bjeqdS", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "609df6bd-1c91-4227-ae9d-18e3691dfd89", "record_id": "flaws_cloudtrail:0000426:609df6bd-1c91-4227-ae9d-18e3691dfd89", "row_index": 426, "timestamp": "2018-04-18T04:06:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "609df6bd-1c91-4227-ae9d-18e3691dfd89", "eventTime": "2018-04-18T04:06:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: p1VzwXfgosOI-TwfaxwoEd1YjLBiYhNsHk1mZxOcCf5mEMkD6j7YMjVaoBbQ78Z6i0W_jmZ5iXx3Tu-Zxwha3rM7hUfleHq2GWov1c0PiWxY1tIUwply3_W4D6HYmeYfEvTGXJ82Jw-CBzEbBj1h4qHIueqQn8869NL4nGlQzRjQR1CkQyYtmnGfWgt51-q_bu9g4v-jMXcYWRmGE3OMkMwL2n7LfcIUO-PpzcAb4VyyTYcXxfgXXR6RGg1HxTk5V_lQW83-MvA2LhCB3o6XNSHSufPH0g-70AILHcHrz6aJ8R94WBPu63w-SUnoEivd_3X4kzN7a8CYop27RSmLc_B6tMX29-3w6C3razxkG2RrgTY5zNp0CsohUCn4_R8FjdIR11KsblTQ24E-_TbkGfVwmqVEIXWXz0Qn11yu7IZp8-KPmrXZbVoT3clMOzUqvIAXTxlfvtoPYeF9FxIDwzzd20HugJYoLGgmVbuVC7O6PAb5jnJ3AeNxrghHT6P5jk8uosvhgaRnLafYw4hRMuDLepb7vN6R-SopCOq-uFAVtL9-rHyN4TlmF-jCecwxQRV2xO5WMo3Ym2QM5moAQuHWRo2sTOHPr9pzeO4O0GbtjX7XBbX8x6D6N5yW4dS281ePlanJslJwgEnpsCoEHAVcKZ31eMSdusG2baU", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71c451c1-0962-4ccf-bb1b-380648474b54", "record_id": "flaws_cloudtrail:0000427:71c451c1-0962-4ccf-bb1b-380648474b54", "row_index": 427, "timestamp": "2018-04-18T04:06:27Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71c451c1-0962-4ccf-bb1b-380648474b54", "eventTime": "2018-04-18T04:06:27Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d64bf416-5ce3-4cf8-acdd-620a0d40e202", "record_id": "flaws_cloudtrail:0000428:d64bf416-5ce3-4cf8-acdd-620a0d40e202", "row_index": 428, "timestamp": "2018-04-18T04:06:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d64bf416-5ce3-4cf8-acdd-620a0d40e202", "eventTime": "2018-04-18T04:06:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ckb5_xTmCHiHF28FEKTAJVNE8A6AifbY1etc6LKf2z8M_RKglB6Hu-2motD9ToY5LJW51RH_8M2t19rWMFR6TzhIkVR3dva66Df8GbJha0R1DizDtC7s5Ydgpbly6tudlE0RFAOIN9p-O3XOjSdKw3_yQqKouOQIZHF6wi1NjoKMvs3HkV8PgGE3kEZR8YAP9axBgSP3S1iCtTsKJGrEEkSAjV4fpPc3NOfGUcOCfLoSxQg0OU8sNJEgRC-tEmAY-Np6Nyx-D9fNz8rZsZ3N80FSpDXXogAMFqnNQgCYX-qBztJz52u-YAidbIHz_J90_1fTmyiWBuZG9eZpGf8Hwdz2_mG6wXE_TAYx1AhYVrcObrdDFHtwiW9LL46-KFLaCy_5QXHjFpkdXuhKI2AnneQasXQ8SuM7x56wezqvPjDR8HfRqXUmlVzkWeOE9ugyESK2jS7kHWN_xqGBW-b2XMpX7lwtgX3xfVFQPcS8bYKvW3yIr4Uak8CUFwXq-srD6RgmqZPnUEoDwt96FLAOUQNZMQcrCLGQ0rS_hVxlzbbUczjCga_Wr2Ut0R2B8A59ZBI4Dz4jObA3gHDeGWvqlJTOL2C9XVbUHdxoZZJkB58hVsCrZeQE6bl4EGmvmZGK6Fq4qeBvVRXULB6Y-Xtu8nThwEKTx7ksBQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b93192-78ec-4801-9085-fdd494645bc3e", "record_id": "flaws_cloudtrail:0000429:4b93192-78ec-4801-9085-fdd494645bc3e", "row_index": 429, "timestamp": "2018-04-18T04:06:27Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b93192-78ec-4801-9085-fdd494645bc3e", "eventTime": "2018-04-18T04:06:27Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58fc92c0-ac26-4540-b8bd-0a3cbe874f25", "record_id": "flaws_cloudtrail:0000430:58fc92c0-ac26-4540-b8bd-0a3cbe874f25", "row_index": 430, "timestamp": "2018-04-18T04:06:28Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58fc92c0-ac26-4540-b8bd-0a3cbe874f25", "eventTime": "2018-04-18T04:06:28Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6053f9f0-285a-4c76-a8d1-af565a73889", "record_id": "flaws_cloudtrail:0000431:6053f9f0-285a-4c76-a8d1-af565a73889", "row_index": 431, "timestamp": "2018-04-18T04:06:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6053f9f0-285a-4c76-a8d1-af565a73889", "eventTime": "2018-04-18T04:06:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f8600e5-17bd-4a78-9340-44066c8694e", "record_id": "flaws_cloudtrail:0000432:9f8600e5-17bd-4a78-9340-44066c8694e", "row_index": 432, "timestamp": "2018-04-18T04:06:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f8600e5-17bd-4a78-9340-44066c8694e", "eventTime": "2018-04-18T04:06:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12356f-5b1f-4389-8276-55d5474a696e", "record_id": "flaws_cloudtrail:0000433:12356f-5b1f-4389-8276-55d5474a696e", "row_index": 433, "timestamp": "2018-04-18T04:06:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12356f-5b1f-4389-8276-55d5474a696e", "eventTime": "2018-04-18T04:06:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88b423fd-49e3-404d-8ee8-7bb7d73a5c3c", "record_id": "flaws_cloudtrail:0000434:88b423fd-49e3-404d-8ee8-7bb7d73a5c3c", "row_index": 434, "timestamp": "2018-04-18T04:06:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88b423fd-49e3-404d-8ee8-7bb7d73a5c3c", "eventTime": "2018-04-18T04:06:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36d8b2b8-b0b6-4349-b625-c1f935c623d0", "record_id": "flaws_cloudtrail:0000435:36d8b2b8-b0b6-4349-b625-c1f935c623d0", "row_index": 435, "timestamp": "2018-04-18T04:06:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36d8b2b8-b0b6-4349-b625-c1f935c623d0", "eventTime": "2018-04-18T04:06:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a56d6f40-65f4-4403-94a4-b51718e53", "record_id": "flaws_cloudtrail:0000436:a56d6f40-65f4-4403-94a4-b51718e53", "row_index": 436, "timestamp": "2018-04-18T04:06:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1279, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a56d6f40-65f4-4403-94a4-b51718e53", "eventTime": "2018-04-18T04:06:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8eee72d-7931-4f83-b5b2-fa4e09f0d63b", "record_id": "flaws_cloudtrail:0000437:b8eee72d-7931-4f83-b5b2-fa4e09f0d63b", "row_index": 437, "timestamp": "2018-04-18T04:06:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8eee72d-7931-4f83-b5b2-fa4e09f0d63b", "eventTime": "2018-04-18T04:06:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a14f022f-7247-46dc-9af9-efee01ff1644", "record_id": "flaws_cloudtrail:0000438:a14f022f-7247-46dc-9af9-efee01ff1644", "row_index": 438, "timestamp": "2018-04-18T04:06:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a14f022f-7247-46dc-9af9-efee01ff1644", "eventTime": "2018-04-18T04:06:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8009dff7-22d4-478b-adea-324c1e8406ec", "record_id": "flaws_cloudtrail:0000439:8009dff7-22d4-478b-adea-324c1e8406ec", "row_index": 439, "timestamp": "2018-04-18T04:06:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8009dff7-22d4-478b-adea-324c1e8406ec", "eventTime": "2018-04-18T04:06:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b5879f4-c789-4488-81bf-d2a2f967f2be", "record_id": "flaws_cloudtrail:0000440:5b5879f4-c789-4488-81bf-d2a2f967f2be", "row_index": 440, "timestamp": "2018-04-18T04:06:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b5879f4-c789-4488-81bf-d2a2f967f2be", "eventTime": "2018-04-18T04:06:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72914b3-556e-43e7-a259-53cd76460", "record_id": "flaws_cloudtrail:0000441:72914b3-556e-43e7-a259-53cd76460", "row_index": 441, "timestamp": "2018-04-18T04:06:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72914b3-556e-43e7-a259-53cd76460", "eventTime": "2018-04-18T04:06:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fa353f0-5f4f-4e15-8144-24334f1911f0", "record_id": "flaws_cloudtrail:0000442:3fa353f0-5f4f-4e15-8144-24334f1911f0", "row_index": 442, "timestamp": "2018-04-18T04:06:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fa353f0-5f4f-4e15-8144-24334f1911f0", "eventTime": "2018-04-18T04:06:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aae061c4-7d06-4dce-890a-d127286423a9", "record_id": "flaws_cloudtrail:0000443:aae061c4-7d06-4dce-890a-d127286423a9", "row_index": 443, "timestamp": "2018-04-18T04:06:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aae061c4-7d06-4dce-890a-d127286423a9", "eventTime": "2018-04-18T04:06:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d717c426-6722-4620-9527-3a7fc341d359", "record_id": "flaws_cloudtrail:0000444:d717c426-6722-4620-9527-3a7fc341d359", "row_index": 444, "timestamp": "2018-04-18T04:06:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d717c426-6722-4620-9527-3a7fc341d359", "eventTime": "2018-04-18T04:06:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "671143a1-fae8-4ace-b7f6-7bc82babf640", "record_id": "flaws_cloudtrail:0000445:671143a1-fae8-4ace-b7f6-7bc82babf640", "row_index": 445, "timestamp": "2018-04-18T04:06:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "671143a1-fae8-4ace-b7f6-7bc82babf640", "eventTime": "2018-04-18T04:06:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b73b1dd4-8cd4-43ca-9ce2-8fbe342c6f9d", "record_id": "flaws_cloudtrail:0000446:b73b1dd4-8cd4-43ca-9ce2-8fbe342c6f9d", "row_index": 446, "timestamp": "2018-04-18T04:06:33Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b73b1dd4-8cd4-43ca-9ce2-8fbe342c6f9d", "eventTime": "2018-04-18T04:06:33Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b0775c9-02ca-4a6e-90c9-d53b3dc9cf0a", "record_id": "flaws_cloudtrail:0000447:9b0775c9-02ca-4a6e-90c9-d53b3dc9cf0a", "row_index": 447, "timestamp": "2018-04-18T04:06:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b0775c9-02ca-4a6e-90c9-d53b3dc9cf0a", "eventTime": "2018-04-18T04:06:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1d21e2a-31bd-41a6-9eff-aff6d011a4df", "record_id": "flaws_cloudtrail:0000448:c1d21e2a-31bd-41a6-9eff-aff6d011a4df", "row_index": 448, "timestamp": "2018-04-18T04:06:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1d21e2a-31bd-41a6-9eff-aff6d011a4df", "eventTime": "2018-04-18T04:06:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30ff9b8d-a916-4f54-8cce-d1cc502e8789", "record_id": "flaws_cloudtrail:0000449:30ff9b8d-a916-4f54-8cce-d1cc502e8789", "row_index": 449, "timestamp": "2018-04-18T04:06:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30ff9b8d-a916-4f54-8cce-d1cc502e8789", "eventTime": "2018-04-18T04:06:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "038645ac-e217-488b-aad7-d44df3e5c21f", "record_id": "flaws_cloudtrail:0000450:038645ac-e217-488b-aad7-d44df3e5c21f", "row_index": 450, "timestamp": "2018-04-18T04:06:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "038645ac-e217-488b-aad7-d44df3e5c21f", "eventTime": "2018-04-18T04:06:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b87b5d86-ebe2-4bea-a764-ff63cc26222", "record_id": "flaws_cloudtrail:0000451:b87b5d86-ebe2-4bea-a764-ff63cc26222", "row_index": 451, "timestamp": "2018-04-18T04:06:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1172, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b87b5d86-ebe2-4bea-a764-ff63cc26222", "eventTime": "2018-04-18T04:06:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdcfc07c-3715-4cea-aaa9-a39accad332a", "record_id": "flaws_cloudtrail:0000452:cdcfc07c-3715-4cea-aaa9-a39accad332a", "row_index": 452, "timestamp": "2018-04-18T04:06:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdcfc07c-3715-4cea-aaa9-a39accad332a", "eventTime": "2018-04-18T04:06:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c097aa9-255d-4db5-9a49-abd2d7ad4a36", "record_id": "flaws_cloudtrail:0000453:7c097aa9-255d-4db5-9a49-abd2d7ad4a36", "row_index": 453, "timestamp": "2018-04-18T04:06:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c097aa9-255d-4db5-9a49-abd2d7ad4a36", "eventTime": "2018-04-18T04:06:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6527bf48-0ad2-4de8-92c5-cc2c35cbca1a", "record_id": "flaws_cloudtrail:0000454:6527bf48-0ad2-4de8-92c5-cc2c35cbca1a", "row_index": 454, "timestamp": "2018-04-18T04:06:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6527bf48-0ad2-4de8-92c5-cc2c35cbca1a", "eventTime": "2018-04-18T04:06:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af993be5-e154-4b3a-a0d4-78380e15", "record_id": "flaws_cloudtrail:0000455:af993be5-e154-4b3a-a0d4-78380e15", "row_index": 455, "timestamp": "2018-04-18T04:06:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af993be5-e154-4b3a-a0d4-78380e15", "eventTime": "2018-04-18T04:06:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffcde738-ca73-4175-ab6e-518d4ac95257", "record_id": "flaws_cloudtrail:0000456:ffcde738-ca73-4175-ab6e-518d4ac95257", "row_index": 456, "timestamp": "2018-04-18T04:06:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1832, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffcde738-ca73-4175-ab6e-518d4ac95257", "eventTime": "2018-04-18T04:06:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: c3UK2SSNn60F1Ky_2Jd_TMizZ4F2V6Jy2Cw13HXktB963RnNRpCzvHo94Cal_34kzmjToMikBex7gzBxcrLsrSyJ4zL1pCxe902vSSRP6ki8GBC2TjTO3Nx6STCThn7CY_p1Rvtx1M1rMbYTJ3UcnHQgNQ_46WZVNibGUT57T1gjG30rKK-tuKa9eakBUCLNd4GAlenoEQNSYHpwtzWbRnBgwb28sPdFqWtNCdMgGuFLC4W1iHLEZmEFCPlVGnEO3NtuUhYsEOQgNaAQ3_7zKBtaW3dpG9CuHVIKfLYa8o-9oJPxE1HPvjDjSrevoorI7VRA-rY4he4UphM2CG6d5pWvre55RZoY47LOB7CT_TMC8VoCfZgl2IGt6NnXA8oYw2SIR4FS9Crzr-bB-5zDcjmzIslGLnJRzl6uHVS6-nsZgIEeRmO3iDIILz2J0PMTx9vM0F6GTi8XR2-7QAMI5d-Te5Vp1lqPjIUm2OanNYKpNSxXt_WuRkisU_QbXdgmlNK3OX-a7su1JUSwY4Gx_uGgqe59usqnUMJNB5_uoGhSNJU9w-NedXAH_wXnNt54U-JkTeKVsEe8M4U7dvAFkXcPGf-074PW0f_LQfkuyv7BRxxApxjdegkYs-oEtkFom4ZSNnzQIF68Zk162b1yIIW_aKuilaixo-f4", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad816b94-dbeb-4dd6-b2e1-517f28a17c3c", "record_id": "flaws_cloudtrail:0000457:ad816b94-dbeb-4dd6-b2e1-517f28a17c3c", "row_index": 457, "timestamp": "2018-04-18T04:06:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1166, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad816b94-dbeb-4dd6-b2e1-517f28a17c3c", "eventTime": "2018-04-18T04:06:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dd073d6-f81e-44f9-bb59-2e466f74f005", "record_id": "flaws_cloudtrail:0000458:8dd073d6-f81e-44f9-bb59-2e466f74f005", "row_index": 458, "timestamp": "2018-04-18T04:06:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dd073d6-f81e-44f9-bb59-2e466f74f005", "eventTime": "2018-04-18T04:06:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47cb8328-ef2d-4248-acd1-ea46044d48b", "record_id": "flaws_cloudtrail:0000459:47cb8328-ef2d-4248-acd1-ea46044d48b", "row_index": 459, "timestamp": "2018-04-18T04:06:38Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47cb8328-ef2d-4248-acd1-ea46044d48b", "eventTime": "2018-04-18T04:06:38Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0e7b672-ed55-4c53-8fb0-4bab7ecaeed2", "record_id": "flaws_cloudtrail:0000460:b0e7b672-ed55-4c53-8fb0-4bab7ecaeed2", "row_index": 460, "timestamp": "2018-04-18T04:06:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0e7b672-ed55-4c53-8fb0-4bab7ecaeed2", "eventTime": "2018-04-18T04:06:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Hv6cTN0zMVAlc3a0uVOeRpUrijdMLcKI1syPG-6gOA8KSFj9sXEl45s2evREW7snYC1icgvL-bfWiNleYJSlRotP-7cawRfnRgGek-EpDghsl2jNEg72INvrr6rQy66z2JSJf72jhAk3TXlv_klm15EVLnnlcFZz7PpJ7EdHhzm9xmM3IHtts11P109HVK0GBbTCeYJnAFBWPzxLiRIPa2-FJaHZc4qgRt0hSNBPcrDoEHozyOS3LCDr_3HHv99-tltTVsZG37-MDijnmvUEDtlnwVLQd_aqSn7xgWKGWcNDzC1-F7dyu2IVUaN54JJx_6hoY_njd8NLUeWteHWhph4owk9b3xY4iRgErkkRJU03Jqz8D485kT9CS_O8G8CdR04nu0gSZBaS37XZVuvhMpM0tqe8xXflS4I6QLYLVFDPtO-IdbiEZ2CU_-udpDD_AtuOrtYC93YJJ1qdqbyUKq-TWFry7wWo5ddwtC309gsuhpSTJi4DjOLaK1CFaE-iAuiIfvZEjagRvpATs89rghW9NZxll9fxo-LbSYO0HxMJj4KvMf1I0fVHvAUi4hj5W49dyYqkzo-qX3lbu01gKTm8q2aj_eapbeo7ehtSoYV4ij1VRFIh17RF83Kn3nFMzS1sHriUg0QBb4FljXmJySScLT_CQc_VD0EfX_62", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "105130ac-57b2-40d8-aeec-13238c8a8a2d", "record_id": "flaws_cloudtrail:0000461:105130ac-57b2-40d8-aeec-13238c8a8a2d", "row_index": 461, "timestamp": "2018-04-18T04:06:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "105130ac-57b2-40d8-aeec-13238c8a8a2d", "eventTime": "2018-04-18T04:06:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01b989c4-de54-4269-80d2-1ec68a7e85d6", "record_id": "flaws_cloudtrail:0000462:01b989c4-de54-4269-80d2-1ec68a7e85d6", "row_index": 462, "timestamp": "2018-04-18T04:06:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01b989c4-de54-4269-80d2-1ec68a7e85d6", "eventTime": "2018-04-18T04:06:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Rfz3RdgNvXOJ02p9BqX6YQTHWwDXnu1VTA6kMEsLaXZTqs1UyUWmWWekZxbkD6lyyw7jb4ccgFfVF1cyZwvmI-YDjK_5J8lNToZhD4YnTQwsLruzA6xICvK7iTXAeO7PHdqV9fce7BFoDNlN6u5DDQcamnwzeHzyqSU7rJhYTYmXq066dp-euqTLJG6Z4x-Z-Hr6DrniNk_ATlW2u_txmv8tzLEFal_L5QL5UVLm4g6SBIL94LcMpt72LQc6IYZ4kZCJQgRHJcv6RE2N-lJpZLX9mqlbEns3Oft6vNlxQtVafJTy2tmSUwA2k6kmXaWbFDGyptg0t85bSuJBNbbcuStOGrheGXS5t5_UAZTwG6CwgUY9sUfuOmJk0_sqg0yhDATe_zsYTTsmrMXglYd4eDaJlwFGdXnibSGH7Tut3NOdKaPYRE3jDKrHLNIpHJ_OSYUZ9_PHqp7B7vztCIFJz-XinGkfpi4EhNm8e01DbFvoLOApuvyfCIo90Wa56PebLqTZrXy9SFszfb6WGDHTrzdZMGXqCSlM872_U7s3sZ2i9SQNNCfkDwKq9YMKnHL-eamyVjTg-k6nHY2hRjgEklq2Fr2U8du1_x9B_LYcKz65slmEkAiUs6IAmfEFoKMrA3qb9GzvEFUYi2y8X6IK70VzDWZEmsOD5g", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1b0ba1d-54ce-45d6-aa7c-332904af6723", "record_id": "flaws_cloudtrail:0000463:b1b0ba1d-54ce-45d6-aa7c-332904af6723", "row_index": 463, "timestamp": "2018-04-18T04:06:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1b0ba1d-54ce-45d6-aa7c-332904af6723", "eventTime": "2018-04-18T04:06:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: CP67MR2icrFFBvAyM1_Uh55d5bv-nC4ViIhtB3g0SjfPAuEOVZJOWs8l4rVOMIPjGhZwRmRDDodL0htL4WLJdLul24C82eHo4-w4FRr6rLndxqe5ZX-m2nOi5gNzSEmjQkICTP4cbcBsnJrOxRhZUAwFwbo4Oy9yyewFIq4B7IwL8i3jthZoY4wx0px58k892UVzTvHsrceeGAC753Z1mTa3lXW6JWY-QbzJthJBbH87uVxjp80edOhdI0rbLg844ydLNqQchuehEAowGsTiEMf6wAHm5_HpBbmye3XsOW_qRTSC1OgoTyDi9kbc9GB9Fm-lBl0FmWMpyqNYRGss3hV0tlzpvdFxbf4EO-kU3XMlXYiCEe43kGD7eVJTFuzIhC7wv7woe-kNhAgma2qALwuTMoRWY4vELJKScFbSNwr6HVNIZnfNVW1H3v3TQNRSZQMfDPQ3sDU8_lUjcIV89EuONBSpfBnSoi39gDPq0n2E75rukUDy7shW2Y5KlWWLyVm6ZXgz-PTL1hZdf1QYD8JNF7U5Y7EXVMHvm7oTotoU18QGTgcIzmnic1IWpVYh1K2WFoiSPPJYqzewMsKHsWmIbVTzsWxy2OK1G6i6rp6IJBW9M0it8E651yUIADLtK_jbzfbQIKcRYwYBqIeEWyyOPa6qNsgHoxs", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95a0e406-55a5-4bd0-9738-c8cb767da482", "record_id": "flaws_cloudtrail:0000464:95a0e406-55a5-4bd0-9738-c8cb767da482", "row_index": 464, "timestamp": "2018-04-18T04:06:39Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95a0e406-55a5-4bd0-9738-c8cb767da482", "eventTime": "2018-04-18T04:06:39Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1caffc42-e74f-42fd-ac64-bc4cac94568", "record_id": "flaws_cloudtrail:0000465:1caffc42-e74f-42fd-ac64-bc4cac94568", "row_index": 465, "timestamp": "2018-04-18T04:06:39Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1caffc42-e74f-42fd-ac64-bc4cac94568", "eventTime": "2018-04-18T04:06:39Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b7c11c3-8d6d-4924-9fa1-da86aedfe526", "record_id": "flaws_cloudtrail:0000466:1b7c11c3-8d6d-4924-9fa1-da86aedfe526", "row_index": 466, "timestamp": "2018-04-18T04:06:39Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b7c11c3-8d6d-4924-9fa1-da86aedfe526", "eventTime": "2018-04-18T04:06:39Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "350e360a-d8e6-4c43-a14a-77cc9620ce74", "record_id": "flaws_cloudtrail:0000467:350e360a-d8e6-4c43-a14a-77cc9620ce74", "row_index": 467, "timestamp": "2018-04-18T04:06:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "350e360a-d8e6-4c43-a14a-77cc9620ce74", "eventTime": "2018-04-18T04:06:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "475c28ec-a837-4e27-9fb4-9dce1dc7f9d8", "record_id": "flaws_cloudtrail:0000468:475c28ec-a837-4e27-9fb4-9dce1dc7f9d8", "row_index": 468, "timestamp": "2018-04-18T04:06:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "475c28ec-a837-4e27-9fb4-9dce1dc7f9d8", "eventTime": "2018-04-18T04:06:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24d8f317-2258-4d98-ae73-cec06ac30f4d", "record_id": "flaws_cloudtrail:0000469:24d8f317-2258-4d98-ae73-cec06ac30f4d", "row_index": 469, "timestamp": "2018-04-18T04:06:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24d8f317-2258-4d98-ae73-cec06ac30f4d", "eventTime": "2018-04-18T04:06:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcb4348a-aeaf-4813-90cd-402c727399b9", "record_id": "flaws_cloudtrail:0000470:dcb4348a-aeaf-4813-90cd-402c727399b9", "row_index": 470, "timestamp": "2018-04-18T04:06:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcb4348a-aeaf-4813-90cd-402c727399b9", "eventTime": "2018-04-18T04:06:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ca5c3a4-837a-467d-affc-7b111a5dded3", "record_id": "flaws_cloudtrail:0000471:9ca5c3a4-837a-467d-affc-7b111a5dded3", "row_index": 471, "timestamp": "2018-04-18T04:06:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ca5c3a4-837a-467d-affc-7b111a5dded3", "eventTime": "2018-04-18T04:06:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1309a7b-8b79-4ef9-bfe4-bf7a5b844aa8", "record_id": "flaws_cloudtrail:0000472:f1309a7b-8b79-4ef9-bfe4-bf7a5b844aa8", "row_index": 472, "timestamp": "2018-04-18T04:06:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1309a7b-8b79-4ef9-bfe4-bf7a5b844aa8", "eventTime": "2018-04-18T04:06:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c5e4729-242c-4e08-832d-38e11397e463", "record_id": "flaws_cloudtrail:0000473:4c5e4729-242c-4e08-832d-38e11397e463", "row_index": 473, "timestamp": "2018-04-18T04:06:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c5e4729-242c-4e08-832d-38e11397e463", "eventTime": "2018-04-18T04:06:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "feda3bcb-6e45-454a-be42-59a37c41c830", "record_id": "flaws_cloudtrail:0000474:feda3bcb-6e45-454a-be42-59a37c41c830", "row_index": 474, "timestamp": "2018-04-18T04:06:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "feda3bcb-6e45-454a-be42-59a37c41c830", "eventTime": "2018-04-18T04:06:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "188f0bdd-9874-4bbb-b4c9-6ee4f83f8679", "record_id": "flaws_cloudtrail:0000475:188f0bdd-9874-4bbb-b4c9-6ee4f83f8679", "row_index": 475, "timestamp": "2018-04-18T04:06:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "188f0bdd-9874-4bbb-b4c9-6ee4f83f8679", "eventTime": "2018-04-18T04:06:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "852319a9-d0ab-4b1e-9c89-db4aa0b27cdc", "record_id": "flaws_cloudtrail:0000476:852319a9-d0ab-4b1e-9c89-db4aa0b27cdc", "row_index": 476, "timestamp": "2018-04-18T04:06:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "852319a9-d0ab-4b1e-9c89-db4aa0b27cdc", "eventTime": "2018-04-18T04:06:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a29e0912-432a-4443-b7a5-15620f", "record_id": "flaws_cloudtrail:0000477:a29e0912-432a-4443-b7a5-15620f", "row_index": 477, "timestamp": "2018-04-18T04:06:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a29e0912-432a-4443-b7a5-15620f", "eventTime": "2018-04-18T04:06:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35de1759-d115-476f-bfd4-0a7d9342dc0a", "record_id": "flaws_cloudtrail:0000478:35de1759-d115-476f-bfd4-0a7d9342dc0a", "row_index": 478, "timestamp": "2018-04-18T04:06:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35de1759-d115-476f-bfd4-0a7d9342dc0a", "eventTime": "2018-04-18T04:06:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c255caa9-3ee0-4858-889a-d7744626597e", "record_id": "flaws_cloudtrail:0000479:c255caa9-3ee0-4858-889a-d7744626597e", "row_index": 479, "timestamp": "2018-04-18T04:06:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c255caa9-3ee0-4858-889a-d7744626597e", "eventTime": "2018-04-18T04:06:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c525c6d-0a4d-4ca2-8cab-2038e091de65", "record_id": "flaws_cloudtrail:0000480:7c525c6d-0a4d-4ca2-8cab-2038e091de65", "row_index": 480, "timestamp": "2018-04-18T04:06:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c525c6d-0a4d-4ca2-8cab-2038e091de65", "eventTime": "2018-04-18T04:06:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eeccdf8b-0b25-4bc7-8a85-866251f07f4a1", "record_id": "flaws_cloudtrail:0000481:eeccdf8b-0b25-4bc7-8a85-866251f07f4a1", "row_index": 481, "timestamp": "2018-04-18T04:06:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eeccdf8b-0b25-4bc7-8a85-866251f07f4a1", "eventTime": "2018-04-18T04:06:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e84ffc0-95bc-43ef-81a5-222ec45742f6", "record_id": "flaws_cloudtrail:0000482:7e84ffc0-95bc-43ef-81a5-222ec45742f6", "row_index": 482, "timestamp": "2018-04-18T04:06:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e84ffc0-95bc-43ef-81a5-222ec45742f6", "eventTime": "2018-04-18T04:06:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00e24f18-9a82-41c9-9bdc-f63beeb180f4", "record_id": "flaws_cloudtrail:0000483:00e24f18-9a82-41c9-9bdc-f63beeb180f4", "row_index": 483, "timestamp": "2018-04-18T04:06:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00e24f18-9a82-41c9-9bdc-f63beeb180f4", "eventTime": "2018-04-18T04:06:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9c10ea9-5a24-42dd-bd99-ed324526bf", "record_id": "flaws_cloudtrail:0000484:c9c10ea9-5a24-42dd-bd99-ed324526bf", "row_index": 484, "timestamp": "2018-04-18T04:06:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1275, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9c10ea9-5a24-42dd-bd99-ed324526bf", "eventTime": "2018-04-18T04:06:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ea15503-d6d2-43d6-bd2a-bfd4876f4e8f", "record_id": "flaws_cloudtrail:0000485:7ea15503-d6d2-43d6-bd2a-bfd4876f4e8f", "row_index": 485, "timestamp": "2018-04-18T04:06:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ea15503-d6d2-43d6-bd2a-bfd4876f4e8f", "eventTime": "2018-04-18T04:06:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "153637d82-9e69-439a-a8e6-145483da6d7e5", "record_id": "flaws_cloudtrail:0000486:153637d82-9e69-439a-a8e6-145483da6d7e5", "row_index": 486, "timestamp": "2018-04-18T04:06:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "153637d82-9e69-439a-a8e6-145483da6d7e5", "eventTime": "2018-04-18T04:06:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7624c21f-1e15-4ac9-9125-d29d7ae5607e", "record_id": "flaws_cloudtrail:0000487:7624c21f-1e15-4ac9-9125-d29d7ae5607e", "row_index": 487, "timestamp": "2018-04-18T04:06:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7624c21f-1e15-4ac9-9125-d29d7ae5607e", "eventTime": "2018-04-18T04:06:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcf85832-e6f2-47e3-8729-62a0806a30b5", "record_id": "flaws_cloudtrail:0000488:dcf85832-e6f2-47e3-8729-62a0806a30b5", "row_index": 488, "timestamp": "2018-04-18T04:06:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcf85832-e6f2-47e3-8729-62a0806a30b5", "eventTime": "2018-04-18T04:06:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "736c87d1-3ff1-4053-96a8-037d9fcea248", "record_id": "flaws_cloudtrail:0000489:736c87d1-3ff1-4053-96a8-037d9fcea248", "row_index": 489, "timestamp": "2018-04-18T04:06:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1172, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "736c87d1-3ff1-4053-96a8-037d9fcea248", "eventTime": "2018-04-18T04:06:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "184f484f-247d-4ef5-80c3-c1801e8f5e92", "record_id": "flaws_cloudtrail:0000490:184f484f-247d-4ef5-80c3-c1801e8f5e92", "row_index": 490, "timestamp": "2018-04-18T04:06:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "184f484f-247d-4ef5-80c3-c1801e8f5e92", "eventTime": "2018-04-18T04:06:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: s6xfcJ49JxK4LpOulrqICNTZuc9ZWhQKiZf_mDB_UYuZFj83tUa18pxGQbsnMpV6xaaAzWw9YbU0PVL4YpQyLwxiFD3WFgYovUarrqnG9-mTXx-AXRiJCP7wma0Vl1YXfboRDUzkKdMf8QVYW4rjb9sTJ9egHrZYEJ6M4ryG7abLjdZoUY7mIIStkvWynZfJbi6_qTFWxLMoO-mghn-hUjnv804QcRXm_CnGq2Vak-f_tiPUeGIbKHsOHzQKgOWfIDmzB9iOOtWhwDcjJ4ki0-F4CXlvMO7ue231WB64QFvIBzGtZWlYFcmjsbvMgGD9m-0NcyPs4c-DOEUAlk7vJyCnTkMaV6bYcIf6ztcR02fT-JM9LzUaTyX0aKod4WAPdbT7pjKVx2JqRjrYUxPsu1NM2u89ANR9bq1C_nHJqBJsLbjgfAIWanemfs7dQIy1gAAJS4WbiMoXcgOlzZsqg-X0RQcVDInFqrC0473cDv_j_UFL0oDBFB5kdpIde1nAwrzldZfTsQLlu3VX-Koienpar5OezbJ_4ejEIKJWD60Yf8QnkIc9jx2UdTot5EARhspbeP8nUcByw8H1lrJLIvdJT0aX-0kgYT0n1KNyRBOCHal0y2J9i7Zd04KSWeUMsFqzt99j1_xVw1w3fMB4LRShkmen7OsD_KIrWgQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57a642075-7022-4c00-b9d0-16a0f663991", "record_id": "flaws_cloudtrail:0000491:57a642075-7022-4c00-b9d0-16a0f663991", "row_index": 491, "timestamp": "2018-04-18T04:06:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57a642075-7022-4c00-b9d0-16a0f663991", "eventTime": "2018-04-18T04:06:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "627d9c0b-dddd-4593-985e-4a11a8163372", "record_id": "flaws_cloudtrail:0000492:627d9c0b-dddd-4593-985e-4a11a8163372", "row_index": 492, "timestamp": "2018-04-18T04:06:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1825, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "627d9c0b-dddd-4593-985e-4a11a8163372", "eventTime": "2018-04-18T04:06:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: iRTRBDcugFwdVBt2xQQXo9G__YqM0DcUqeaESuHj4Sbwx1D4Qaw6sTRbK9sTqthfbUVIVpL_t92hkOKWBUTkiPzYD0fIdo58jTjao42a0w_O0NpQK2DJeJvDXNhaWAnrZCjmde6ei4RB3Dg4pxLBCqQgwFVhuL9_WpkrB_I0QVr4Q-BbwKXpptsYTCuKiZcwPCnAy8PDPtsSbFTSA4qHXFd33PwiAiMYD6Bv8yKSonut3HWEXeXH1rWJB3cLZ5zqHjX96hvPHWlr5AFPHX5yehF8Pmm3SXjSC5geqrK77LyFSUx77LW_lE4dOizg0OTByPYFmRMN3A0PiW_3-_ANK9KA69ml0X3PZhNxcKUg0cWb4iamlHjnsBj6PtvpXFhoGyvxlC9qhe_hwaD2b9VVNZsnRMfn6iOJFLqYHTXlRDQxzWe-5xUDVYTvYFTVIvJQ3A-ZoR7oyfIy9pa0foYpxwnJIZ9KeFy2rFuPAbIBDgE25c4y0N0BUOkfKujWyFKdytHvNxBcI-QLeGUrvklToTKIJtdoz1oE9MPxRN-a5rwbdITk6sas1e11MiUZOpC9g3Ih76Q1fOQ7fnLwtcFAiSwN7x0aZ0yd8w1_y_E667lmEC10xUenKH8I269OD485bG3pZjDGFZhMtEd7S_6ESbs6n5ihDvak6A", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22b524b6-7784-44ef-8547-2a7bf9256ab5", "record_id": "flaws_cloudtrail:0000493:22b524b6-7784-44ef-8547-2a7bf9256ab5", "row_index": 493, "timestamp": "2018-04-18T04:06:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22b524b6-7784-44ef-8547-2a7bf9256ab5", "eventTime": "2018-04-18T04:06:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d89cbad1-e608-47ae-84b9-561911a89a22c", "record_id": "flaws_cloudtrail:0000494:d89cbad1-e608-47ae-84b9-561911a89a22c", "row_index": 494, "timestamp": "2018-04-18T04:06:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d89cbad1-e608-47ae-84b9-561911a89a22c", "eventTime": "2018-04-18T04:06:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ce3f941-7016-4691-b4f0-d07e9a35f9e5", "record_id": "flaws_cloudtrail:0000495:6ce3f941-7016-4691-b4f0-d07e9a35f9e5", "row_index": 495, "timestamp": "2018-04-18T04:06:50Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ce3f941-7016-4691-b4f0-d07e9a35f9e5", "eventTime": "2018-04-18T04:06:50Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a185b6a7-f293-4e2e-a448-debf4e7680c7", "record_id": "flaws_cloudtrail:0000496:a185b6a7-f293-4e2e-a448-debf4e7680c7", "row_index": 496, "timestamp": "2018-04-18T04:06:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1829, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a185b6a7-f293-4e2e-a448-debf4e7680c7", "eventTime": "2018-04-18T04:06:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: wf0a3yfa1I_Gcl0qdSzhMPFIF5Gj0yZhC-InY_xchNjKgkEkp1stg41SEP0DnCmLmGjVouCZ8Vm4MFKIjX6Quh2g1Oa-6UjXV5Yh5wTUWVeSsC7JLfUC74n7-bc6sJgCMmub-o4TgIaEv9joKkT9mq42WH42KdtfCCYIRsRn9E28aIA0eIfMGk5NIgpibc3ImS9I5cJyzK1aZTyEJDDRuLtLH8wgepSYIiURlFcXjH-XMorVt5a-xLuZEFYYRJpdKt3p6etNO-UNdj-W2g_Iw_GssuVaXk6osAF3tTrO_X5njAU6-lxK7ejklLyPQEwUmahwCOKflV0Ttose2PanZeEMk6TLG_FPZgsjSCzMUvF1guNIFx6oB458t9V0vz2FALpKgFra-jBSGyS5kVdStH0rs2YKyjG9Cfg9Q2qRPoEWT25jlNyO2etFNwWJOi_OKKqmCVOH37KoKl_wUhaTdsfQD4sYLvmAeaM2N_UVcw0gaazhSIayEY3f8eZNzn-r9XNkN31t6U-bk_jJsa1fE6awiFmWUx2Okc6Q-3_0EXVnhPQfHZ6Q5iSbY5j9EbB3LrwKpxv-_HcVGCI-DjNtaK4EftA2Q1bS4jW3btMbIUze-XjnvjoMPH2h5T7RcQEYGS3LiJyz2MQFLVol0s9HDbvW6F1vU8De-UI", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8baf4480-13bf-4e59-b7ee-ec2c1167e335", "record_id": "flaws_cloudtrail:0000497:8baf4480-13bf-4e59-b7ee-ec2c1167e335", "row_index": 497, "timestamp": "2018-04-18T04:06:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1832, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8baf4480-13bf-4e59-b7ee-ec2c1167e335", "eventTime": "2018-04-18T04:06:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: AHUTkF4IDWMU-jb1BFz02O2fZmqvGgH7f0aT6DZHk18qsZ6pN4TvNAawVVqwE3yrNZcl-SwgF0XTsfA-iolx-QSssj6TuLz1kYvYQm8u6_H1vIMaVYlvtQwUyEYOf1DrwO0oHQNbqbRjFEWSer5mvtqLVyBxQfufze5NOcF9FqzamenU00OvJ3FTpUquWRJVSSqtBY-SMZAwd-g9Doskwg8aVcmnaCwGHmvv5SLC66f3-h5gmvyOGpPnm4mvBiiYpZTs_yZiuPvzJVd7iEcdZIN2FN5MWYhdHar2BMWqAaEhh5JbFXo-AQvCYRYOZ4uF6ZRKpvibzwKjvZn3uhmmrUry399Tp-D1fm1ATO_Fb0qbhFatlyBTsB2g8fmHXXC1ymgZb91EgVwqOZXOgqsm3eBouYOSodxtMz2_YMFIJqcQV-myK1yGGiO5geottusu4zNS-DzO5W6bQFLaMay6106o7vGhnz0ZhUDJM8HYwtZz8yMQiMhyvy8GeKvN7ikWbsKCTjfRM4xUZQui8ZPo-IF9AD55cnT4bD691nKDWR6D3PNHRUmDsnynytFWlBhVP6FEvSWbvwm0ZWRQ5s6H90G_i_-ERew7AxZbKwcYVRL4esGWBQUwlkg8TE2UDwpDuD0-AKOTX72uKZCNdqnMLv-Mgm1sPscTzfo-", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f797f37-cca4-4209-b824-480bc2843eaa", "record_id": "flaws_cloudtrail:0000498:4f797f37-cca4-4209-b824-480bc2843eaa", "row_index": 498, "timestamp": "2018-04-18T04:06:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f797f37-cca4-4209-b824-480bc2843eaa", "eventTime": "2018-04-18T04:06:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Lzd1tR2BrMUkjMNOFrkMgN4b9blL-_XRd1vacgqjZuGFlcbj6KpiXADKSAU83MDfUd1bKFQC376Uknug67hylMvcMU4dlSWAe38AMJI-msJrtKejuV4Jki8XRwJmwfA-Hd79oGUn0mJsJaVdjAjj_HXNx9qm9V_Z3OkfgBdrfSL-chGJNtJKjvRnNxLT8XGMJq3UBwOKyUe4XUqM3gJFlZKoT1CzdKcMqmn03Kwg8YMxor8S6ojD__qWB7zWI2DsPXoHREmvKmHloghRtAQoXatoB_TrWl27meyjwDXfVoqacWC4cA2ARu8zosREOvNIunEAPtUtj3QDsyS5ei1cbrK4noHyVOR_NHmL872DGMf1a_nt1l5oiiAlf4QJLDwATzGVk_8tJXYqg8iurEbOeoGVLfpeoPkeAFKqX8b6QCW0Q8Lf-xH4sC5DEm4UbhIe1CeTbTjR-e01iy81_Qz20sajgByBxuZSJOdalakCuf7Y1rTHRgWpnEcKh--ta4CIj4ROoNvLe0o2l6gJe2LbasF3zFsq0Fw6MgULEbfM7h7pI-_g_Phg4_ksnmGcDANfdNTUC261o1tAkLDh4697jNd_O-wbnsCLq4kkztF5albJJYxMKG5sS7ZfX30oc7-P0huSzseDfWrnitIxNTB-Tj2eaMrDTX9ZHw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-63f71193", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47faab2d-3efd-4351-b96c-13cb9a8bde9b", "record_id": "flaws_cloudtrail:0000499:47faab2d-3efd-4351-b96c-13cb9a8bde9b", "row_index": 499, "timestamp": "2018-04-18T04:06:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47faab2d-3efd-4351-b96c-13cb9a8bde9b", "eventTime": "2018-04-18T04:06:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2767f1db-ac8d-46ac-9c99-f4af438aa298", "record_id": "flaws_cloudtrail:0000500:2767f1db-ac8d-46ac-9c99-f4af438aa298", "row_index": 500, "timestamp": "2018-04-18T04:07:21Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2767f1db-ac8d-46ac-9c99-f4af438aa298", "eventTime": "2018-04-18T04:07:21Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e23e15d-c647-49e4-8df4-32d0d17368b5", "record_id": "flaws_cloudtrail:0000501:5e23e15d-c647-49e4-8df4-32d0d17368b5", "row_index": 501, "timestamp": "2018-04-18T04:07:23Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e23e15d-c647-49e4-8df4-32d0d17368b5", "eventTime": "2018-04-18T04:07:23Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6df189db-16df-41fe-8202-9d38db699918", "record_id": "flaws_cloudtrail:0000502:6df189db-16df-41fe-8202-9d38db699918", "row_index": 502, "timestamp": "2018-04-18T04:07:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6df189db-16df-41fe-8202-9d38db699918", "eventTime": "2018-04-18T04:07:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da8c6167-7b1b-48a1-9336-2658e55a6f39", "record_id": "flaws_cloudtrail:0000503:da8c6167-7b1b-48a1-9336-2658e55a6f39", "row_index": 503, "timestamp": "2018-04-18T04:07:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da8c6167-7b1b-48a1-9336-2658e55a6f39", "eventTime": "2018-04-18T04:07:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3776f8bf-7b9f-4c49-b457-f707d24158d8", "record_id": "flaws_cloudtrail:0000504:3776f8bf-7b9f-4c49-b457-f707d24158d8", "row_index": 504, "timestamp": "2018-04-18T04:07:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3776f8bf-7b9f-4c49-b457-f707d24158d8", "eventTime": "2018-04-18T04:07:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c72cfd75-7d2c-43f0-a454-09bec6fa1fbe", "record_id": "flaws_cloudtrail:0000505:c72cfd75-7d2c-43f0-a454-09bec6fa1fbe", "row_index": 505, "timestamp": "2018-04-18T04:08:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1825, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c72cfd75-7d2c-43f0-a454-09bec6fa1fbe", "eventTime": "2018-04-18T04:08:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-3", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cW3ZnCu-vKtxUcVlfW8dRmPhcJtdFXuaKVA6XutQZ6cSsXbg4NRMuVKIDHbPUV70MCu8Bz-6-AhvrvzSLILJ9DOpWn2eyXSrBRFKuo3XqbJLbBEMLUp6VX4RhuOD3-2VIoXu0hc_NL8738d9xRVHGm30rZEsz9yqegATwTiqm_dTj1ifAV43tP_dpV-fvJkmAnQFZ1jVHEowOBc7PL7V4g-C0d_34fuKp8GjHpNap7snI7WtNvxQPPDeqZXml39VNdEqauaa8heYaHOUzumE6ZwHI8chZG_mwcQ9DaeMAcuMUDNNujvBdXZeR7WFeeyuU92MI8ASL-JYmpysfWjYqBAGk9rqTWba4znFTxRCfd_XFrKEnvf4MRkV7YfmIrLH8YgXOCfnZccNMywHs0rS6Dc-mt3aHzvALmdgl1BF0IKxcT6lcDXS0nvq-MtHXEG-usW4CP_iMmMJmg99ctyB2Hi-6W4ytD2JCWy_v3xOa_1qqDFRxZFTrp9rL4uCcwnk_Cd0TVK2RIZiDa5y3ldhsLXMH_-JpLmlieQJqYyGI5GcktbY4uCLhiC8YPrW2wTebtItzeyHIUse9AzEDFcryKfXVIBdW3hhI5IceqEd07DXEbuKukp2ZU9dL1YYQzPDfznkOZox9_aE5Nb7qoXnSPQs_35N-nIfbw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-3a3a9be3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35ba4809-5208-454b-89de-59bb70cad696", "record_id": "flaws_cloudtrail:0000506:35ba4809-5208-454b-89de-59bb70cad696", "row_index": 506, "timestamp": "2018-04-18T04:16:40Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35ba4809-5208-454b-89de-59bb70cad696", "eventTime": "2018-04-18T04:16:40Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27ddb3c8-1990-4ebf-8631-0824ae0f430b", "record_id": "flaws_cloudtrail:0000507:27ddb3c8-1990-4ebf-8631-0824ae0f430b", "row_index": 507, "timestamp": "2018-04-18T04:16:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27ddb3c8-1990-4ebf-8631-0824ae0f430b", "eventTime": "2018-04-18T04:16:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccabb029-71d2-4b2d-bf77-eef67b836a71", "record_id": "flaws_cloudtrail:0000508:ccabb029-71d2-4b2d-bf77-eef67b836a71", "row_index": 508, "timestamp": "2018-04-18T04:16:44Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccabb029-71d2-4b2d-bf77-eef67b836a71", "eventTime": "2018-04-18T04:16:44Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "694186-8a3a-4983-8f8b-e8cd03e43dc4", "record_id": "flaws_cloudtrail:0000509:694186-8a3a-4983-8f8b-e8cd03e43dc4", "row_index": 509, "timestamp": "2018-04-18T04:16:44Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "694186-8a3a-4983-8f8b-e8cd03e43dc4", "eventTime": "2018-04-18T04:16:44Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7afd1d2e-fff6-4f9b-8d77-48f932a205bd", "record_id": "flaws_cloudtrail:0000510:7afd1d2e-fff6-4f9b-8d77-48f932a205bd", "row_index": 510, "timestamp": "2018-04-18T04:16:45Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7afd1d2e-fff6-4f9b-8d77-48f932a205bd", "eventTime": "2018-04-18T04:16:45Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eeb2ec81-697b-4934-8705-063771b48419f", "record_id": "flaws_cloudtrail:0000511:eeb2ec81-697b-4934-8705-063771b48419f", "row_index": 511, "timestamp": "2018-04-18T04:16:45Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eeb2ec81-697b-4934-8705-063771b48419f", "eventTime": "2018-04-18T04:16:45Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b88ce7f7-e780-4b12-8663-0c697130f2216", "record_id": "flaws_cloudtrail:0000512:b88ce7f7-e780-4b12-8663-0c697130f2216", "row_index": 512, "timestamp": "2018-04-18T04:16:46Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b88ce7f7-e780-4b12-8663-0c697130f2216", "eventTime": "2018-04-18T04:16:46Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fd834fe-1f52-44d2-9026-68f05a2a89ee", "record_id": "flaws_cloudtrail:0000513:1fd834fe-1f52-44d2-9026-68f05a2a89ee", "row_index": 513, "timestamp": "2018-04-18T04:16:47Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fd834fe-1f52-44d2-9026-68f05a2a89ee", "eventTime": "2018-04-18T04:16:47Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "449d095c-37ce-4911-b545-b0fad7e723cd", "record_id": "flaws_cloudtrail:0000514:449d095c-37ce-4911-b545-b0fad7e723cd", "row_index": 514, "timestamp": "2018-04-18T04:16:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "449d095c-37ce-4911-b545-b0fad7e723cd", "eventTime": "2018-04-18T04:16:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f25c987-1927-4a30-8404-e34d3ab34bb9", "record_id": "flaws_cloudtrail:0000515:6f25c987-1927-4a30-8404-e34d3ab34bb9", "row_index": 515, "timestamp": "2018-04-18T04:16:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f25c987-1927-4a30-8404-e34d3ab34bb9", "eventTime": "2018-04-18T04:16:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "107294aa3-f7e9-4ba9-80a0-0dec2cf405bd", "record_id": "flaws_cloudtrail:0000516:107294aa3-f7e9-4ba9-80a0-0dec2cf405bd", "row_index": 516, "timestamp": "2018-04-18T04:16:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "107294aa3-f7e9-4ba9-80a0-0dec2cf405bd", "eventTime": "2018-04-18T04:16:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50006-1f1c-4500-ba19-17f863dddb74", "record_id": "flaws_cloudtrail:0000517:50006-1f1c-4500-ba19-17f863dddb74", "row_index": 517, "timestamp": "2018-04-18T04:16:50Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50006-1f1c-4500-ba19-17f863dddb74", "eventTime": "2018-04-18T04:16:50Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3835aa02-1702-410e-b14e-cb4c6b8f6f8a", "record_id": "flaws_cloudtrail:0000518:3835aa02-1702-410e-b14e-cb4c6b8f6f8a", "row_index": 518, "timestamp": "2018-04-18T04:16:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1170, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3835aa02-1702-410e-b14e-cb4c6b8f6f8a", "eventTime": "2018-04-18T04:16:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec1c79d5-b8e9-4695-8601-a6abacb3d1d3", "record_id": "flaws_cloudtrail:0000519:ec1c79d5-b8e9-4695-8601-a6abacb3d1d3", "row_index": 519, "timestamp": "2018-04-18T04:16:51Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec1c79d5-b8e9-4695-8601-a6abacb3d1d3", "eventTime": "2018-04-18T04:16:51Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b36d9cbe-250c-4203-aee9-d1e92078edb2", "record_id": "flaws_cloudtrail:0000520:b36d9cbe-250c-4203-aee9-d1e92078edb2", "row_index": 520, "timestamp": "2018-04-18T04:16:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b36d9cbe-250c-4203-aee9-d1e92078edb2", "eventTime": "2018-04-18T04:16:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c977eef6-6961-495f-9f0c-a64b8f1fd4ff", "record_id": "flaws_cloudtrail:0000521:c977eef6-6961-495f-9f0c-a64b8f1fd4ff", "row_index": 521, "timestamp": "2018-04-18T04:16:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c977eef6-6961-495f-9f0c-a64b8f1fd4ff", "eventTime": "2018-04-18T04:16:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c7d632c-023a-4342-9f3d-11981af30b40", "record_id": "flaws_cloudtrail:0000522:8c7d632c-023a-4342-9f3d-11981af30b40", "row_index": 522, "timestamp": "2018-04-18T04:16:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c7d632c-023a-4342-9f3d-11981af30b40", "eventTime": "2018-04-18T04:16:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4c115c1-1c72-47d9-92ef-57c50f10fde6", "record_id": "flaws_cloudtrail:0000523:c4c115c1-1c72-47d9-92ef-57c50f10fde6", "row_index": 523, "timestamp": "2018-04-18T04:16:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4c115c1-1c72-47d9-92ef-57c50f10fde6", "eventTime": "2018-04-18T04:16:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "232848ca-9816-4f85-9da2-e4a871d4fbdd", "record_id": "flaws_cloudtrail:0000524:232848ca-9816-4f85-9da2-e4a871d4fbdd", "row_index": 524, "timestamp": "2018-04-18T04:16:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1828, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "232848ca-9816-4f85-9da2-e4a871d4fbdd", "eventTime": "2018-04-18T04:16:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 4iMhm3qMeSjtlJv2zdxJ8BvYl6rojiUfT5ApwllzGUFO1W5B-B5a9yRg1MiSrNS_RSLm0g-vxBFtchXRcK2BNBRjlruA36t8tbKRFjcqT8sTyQLkztLc06DZrYiJ1nuTYYJd1zbJQIc73I1Ocf56Km7U2J-4yHj6fa0A-pT5dXHvggzm-KSkY8K5x0UqrVlQr7mBpWoeqT03o8N2Dw-CEyYyDEQAQ-phmKTr9HLjUqXyr1Ae5O6HLSrOdeLU0wk0n3RprBXP8wrO7-MlGroWkT-_YG4biz7j1I9WI-lOb726N76JwB9n7H3b-bG7Yg-yJzz-hZZIHWvkm7VgI-9U1faFY7-hgBH2RWzGeGAZ8BASW7tcnSTcF_lEuDYS_NzvkOKms0Ml7gDA9Xx2KHYXw1eQjc5cP7SuiQaoTVFXElxmZXus4I1AYNxpH0MBuafp7hOHXV5urXuZl7q6D2dfycmlZd6zEGtNvPAibzSa4UwoytZF39--9Zbjt9pl9CdYVG32-tC42mQU6ZHZsiJ3YA9qIqm3UZM8M3CZ66BhE8rthVuXWHPwzHnDR6I9AP-pUxL4bar5WeyJznrRZn8L9pf95El3yGCusDZEQ3M0AnS7XI-zbk4CDGpp3ala6GGh_OaMpPRc_n7XotSgCxZHMZsbspTG-dw9Cgo", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-f5710223", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "984e6ae3-c245-429b-b80f-76cbd9f3aa93", "record_id": "flaws_cloudtrail:0000525:984e6ae3-c245-429b-b80f-76cbd9f3aa93", "row_index": 525, "timestamp": "2018-04-18T04:16:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "984e6ae3-c245-429b-b80f-76cbd9f3aa93", "eventTime": "2018-04-18T04:16:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23a2de2c-ff9e-4994-88b2-33502d6355f6", "record_id": "flaws_cloudtrail:0000526:23a2de2c-ff9e-4994-88b2-33502d6355f6", "row_index": 526, "timestamp": "2018-04-18T04:16:54Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23a2de2c-ff9e-4994-88b2-33502d6355f6", "eventTime": "2018-04-18T04:16:54Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22ada943-507c-48a7-8482-52bbdc142c2e", "record_id": "flaws_cloudtrail:0000527:22ada943-507c-48a7-8482-52bbdc142c2e", "row_index": 527, "timestamp": "2018-04-18T04:16:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22ada943-507c-48a7-8482-52bbdc142c2e", "eventTime": "2018-04-18T04:16:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52191-1775-4f7c-bad5-c51614b8d99", "record_id": "flaws_cloudtrail:0000528:52191-1775-4f7c-bad5-c51614b8d99", "row_index": 528, "timestamp": "2018-04-18T04:16:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52191-1775-4f7c-bad5-c51614b8d99", "eventTime": "2018-04-18T04:16:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02835f88-e060-47e5-bd97-b0534b574bce", "record_id": "flaws_cloudtrail:0000529:02835f88-e060-47e5-bd97-b0534b574bce", "row_index": 529, "timestamp": "2018-04-18T04:16:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02835f88-e060-47e5-bd97-b0534b574bce", "eventTime": "2018-04-18T04:16:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c9bc6cd-e87a-4bb6-b04c-db19f3304108", "record_id": "flaws_cloudtrail:0000530:3c9bc6cd-e87a-4bb6-b04c-db19f3304108", "row_index": 530, "timestamp": "2018-04-18T04:16:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c9bc6cd-e87a-4bb6-b04c-db19f3304108", "eventTime": "2018-04-18T04:16:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9b7d81d-cbe5-4ab7-9475-3b989b8a7d7a", "record_id": "flaws_cloudtrail:0000531:f9b7d81d-cbe5-4ab7-9475-3b989b8a7d7a", "row_index": 531, "timestamp": "2018-04-18T04:16:58Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9b7d81d-cbe5-4ab7-9475-3b989b8a7d7a", "eventTime": "2018-04-18T04:16:58Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "702078d43-1e98-491b-95ba-b57193feee31", "record_id": "flaws_cloudtrail:0000532:702078d43-1e98-491b-95ba-b57193feee31", "row_index": 532, "timestamp": "2018-04-18T04:16:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "702078d43-1e98-491b-95ba-b57193feee31", "eventTime": "2018-04-18T04:16:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ffbfe99-df38-4674-b421-c4130dca4a6a", "record_id": "flaws_cloudtrail:0000533:7ffbfe99-df38-4674-b421-c4130dca4a6a", "row_index": 533, "timestamp": "2018-04-18T04:16:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1176, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ffbfe99-df38-4674-b421-c4130dca4a6a", "eventTime": "2018-04-18T04:16:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ecdb262-be81-4855-aa9d-caf6645791a8", "record_id": "flaws_cloudtrail:0000534:5ecdb262-be81-4855-aa9d-caf6645791a8", "row_index": 534, "timestamp": "2018-04-18T04:16:59Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ecdb262-be81-4855-aa9d-caf6645791a8", "eventTime": "2018-04-18T04:16:59Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa992f69-665e-4075-b1ed-0d9c434e5b8b", "record_id": "flaws_cloudtrail:0000535:fa992f69-665e-4075-b1ed-0d9c434e5b8b", "row_index": 535, "timestamp": "2018-04-18T04:17:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa992f69-665e-4075-b1ed-0d9c434e5b8b", "eventTime": "2018-04-18T04:17:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e58039-278a-49c1-ba7c-bd4dd7b41336", "record_id": "flaws_cloudtrail:0000536:9e58039-278a-49c1-ba7c-bd4dd7b41336", "row_index": 536, "timestamp": "2018-04-18T04:17:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e58039-278a-49c1-ba7c-bd4dd7b41336", "eventTime": "2018-04-18T04:17:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96e2eae1-982f-42c7-84c6-45342c3cf4f0", "record_id": "flaws_cloudtrail:0000537:96e2eae1-982f-42c7-84c6-45342c3cf4f0", "row_index": 537, "timestamp": "2018-04-18T04:17:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96e2eae1-982f-42c7-84c6-45342c3cf4f0", "eventTime": "2018-04-18T04:17:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13c459df-7d3f-4800-9671-476be4e758eb", "record_id": "flaws_cloudtrail:0000538:13c459df-7d3f-4800-9671-476be4e758eb", "row_index": 538, "timestamp": "2018-04-18T04:17:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13c459df-7d3f-4800-9671-476be4e758eb", "eventTime": "2018-04-18T04:17:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "960305-5343-47d0-9c8c-f1981cc49921", "record_id": "flaws_cloudtrail:0000539:960305-5343-47d0-9c8c-f1981cc49921", "row_index": 539, "timestamp": "2018-04-18T04:17:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "960305-5343-47d0-9c8c-f1981cc49921", "eventTime": "2018-04-18T04:17:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7979eea4-e942-4faf-b427-2703de859ffc", "record_id": "flaws_cloudtrail:0000540:7979eea4-e942-4faf-b427-2703de859ffc", "row_index": 540, "timestamp": "2018-04-18T04:17:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7979eea4-e942-4faf-b427-2703de859ffc", "eventTime": "2018-04-18T04:17:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b3072e6-c919-4b64-a121-6fb2348b3dee", "record_id": "flaws_cloudtrail:0000541:6b3072e6-c919-4b64-a121-6fb2348b3dee", "row_index": 541, "timestamp": "2018-04-18T04:17:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1275, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b3072e6-c919-4b64-a121-6fb2348b3dee", "eventTime": "2018-04-18T04:17:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "158b4303-56d5-45ee-80a1-130c8b0b4d26", "record_id": "flaws_cloudtrail:0000542:158b4303-56d5-45ee-80a1-130c8b0b4d26", "row_index": 542, "timestamp": "2018-04-18T04:17:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "158b4303-56d5-45ee-80a1-130c8b0b4d26", "eventTime": "2018-04-18T04:17:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a142c930-dd24-45a4-8c31-0c7dd689ee65", "record_id": "flaws_cloudtrail:0000543:a142c930-dd24-45a4-8c31-0c7dd689ee65", "row_index": 543, "timestamp": "2018-04-18T04:17:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a142c930-dd24-45a4-8c31-0c7dd689ee65", "eventTime": "2018-04-18T04:17:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "176e35a2-9df9-4596-bce8-30e441b8a35d", "record_id": "flaws_cloudtrail:0000544:176e35a2-9df9-4596-bce8-30e441b8a35d", "row_index": 544, "timestamp": "2018-04-18T04:17:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "176e35a2-9df9-4596-bce8-30e441b8a35d", "eventTime": "2018-04-18T04:17:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02a40091-9f25-4c06-9e9b-43b496149a80", "record_id": "flaws_cloudtrail:0000545:02a40091-9f25-4c06-9e9b-43b496149a80", "row_index": 545, "timestamp": "2018-04-18T04:17:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02a40091-9f25-4c06-9e9b-43b496149a80", "eventTime": "2018-04-18T04:17:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c89db3b-4dae-4cf0-b9b3-702256cfa9f51", "record_id": "flaws_cloudtrail:0000546:8c89db3b-4dae-4cf0-b9b3-702256cfa9f51", "row_index": 546, "timestamp": "2018-04-18T04:17:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c89db3b-4dae-4cf0-b9b3-702256cfa9f51", "eventTime": "2018-04-18T04:17:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08bf3fcf-5807-479b-95cc-81bd7993e263", "record_id": "flaws_cloudtrail:0000547:08bf3fcf-5807-479b-95cc-81bd7993e263", "row_index": 547, "timestamp": "2018-04-18T04:17:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1169, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08bf3fcf-5807-479b-95cc-81bd7993e263", "eventTime": "2018-04-18T04:17:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bd55e3c-71c1-4f5b-bacf-abae184a86e6", "record_id": "flaws_cloudtrail:0000548:4bd55e3c-71c1-4f5b-bacf-abae184a86e6", "row_index": 548, "timestamp": "2018-04-18T04:17:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bd55e3c-71c1-4f5b-bacf-abae184a86e6", "eventTime": "2018-04-18T04:17:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: s-8Qa9cRZ5YUIzCWqpGpW-QY64xQlt1PGHOLZ3_EJuU4WH2z6-ZlV8DurkEP_qCgZyq0z_Rm5w-Us0uWs2AajRRppRx_fg5s8c271H0ILQy4UYDKgVCQeXdVL1ddRVb6E27A07WZgE23Je6HnLAKxA4U3sB3WHcB0OpzCOSM2pqiadcFzJO-MGMqHrQYFVZ-4mlKvihULICjMFiRv49Fxdaqhz6NQi_JRiX4qBCR0LdccjWS01nRXH_lA6J7mZ8mFRM6Z-ThKTAm0dm4wvDlIk7XeZDySFVhd7D48KYIGdKN37j6LnTuLJ-pqPXrBvIV774wCYesRZMSXp9rLstolYa1OzkkOP19RQnGL29UWIZOWShA3RYbLX2h8JSdpkcYKPpvWAujutgA8L7awjyDD1XQxG7ypGzSI9IRootqgmwf0ePC3bsaiwpD_bRVxjP1w0cj66gQmhOsYwSG5DNG24dbc9-dBL62Uc6qjwcnolovEalsBZ-AtTkbGkawVp8wJE_Ikb51HbehzYlh5D67IKGp9tZ_X7MwlhmJpZKvIWXLY0ET5gnA8X0IipgLtizLtqWA7Sojw3EYG_D4yganG7WmEli8aswmnGgdy3TvGHRfM-eBBxeuZXvlQGu6ZLLmLIOX86sQ0vrDukcyL3EmrdviSL1CYT31hBgBhKye", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ca57294", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3760a5e-91f3-41fc-9783-cc40187f31f", "record_id": "flaws_cloudtrail:0000549:e3760a5e-91f3-41fc-9783-cc40187f31f", "row_index": 549, "timestamp": "2018-04-18T04:17:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3760a5e-91f3-41fc-9783-cc40187f31f", "eventTime": "2018-04-18T04:17:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94f8402f-7797-48f1-a880-768cc705349", "record_id": "flaws_cloudtrail:0000550:94f8402f-7797-48f1-a880-768cc705349", "row_index": 550, "timestamp": "2018-04-18T04:17:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94f8402f-7797-48f1-a880-768cc705349", "eventTime": "2018-04-18T04:17:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c860cc40-8b5b-48d6-9f0f-4cd8805f52ac", "record_id": "flaws_cloudtrail:0000551:c860cc40-8b5b-48d6-9f0f-4cd8805f52ac", "row_index": 551, "timestamp": "2018-04-18T04:17:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c860cc40-8b5b-48d6-9f0f-4cd8805f52ac", "eventTime": "2018-04-18T04:17:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: CgewdGn-E_umVVt4ypwMgKxG4AlJS9sz2qXQxOdK7_D4LKh0GvUj7JwuxA9gl_jLdQST8R348snCR5yJcY2bBH8Sp1WK5smPiYiH8_OxKEKBK4aRx3_6zJPV34cnSnvj_mRZCGuLrquTZWqDb2Gty5iN2vgv0mLgNqz1cmjYgIYi5lXDeSg11DqQUApXRVn-aVLLz-Qp68IS50ToFstIeLiACYwxIVXFAjHmaQSLJHV_21matGIYkpAXkbgakUSoQRIBzkyczbtF-Amirsx47oo72YV5ZXv-thPhQFw7Ro_ZjmQQuW8Y4OZtQ7u9G0Kda1aFAgj5Jc0sWD0TM80T6Etiu1hggmKKEtZP5sPlMx-EH6mWGte_j1AWMaFZyvim5C716XXZR9pnuR1tKu3shMXZCsOEE3AzkH2-H12s9_VpEclr8nFq3fboAmf5nrg8UeFxXM32HroH53YVstF1ChCeJpekh2uq5059o0wmCWZw51Q3KQJ0It09hKAwbrjkdAq7cqf4DeouxoOUpNHgFaZ-zf67MiVl_tHTm4qcz6zOS4W6JnzlKM4kDpeCMvV-FfjjqjLJIESmvSssnYLdggA4q7eqOEKwgkXc2lMsA9iUODFv2JBzqSst3EyBW_z3XygkyWmLkiSt18KKK45z8KNn1XM4BOc7Vs3A08UR", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-14f2b3cc", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e889f255-4122-40ae-aaf8-3b06fb7c2a27", "record_id": "flaws_cloudtrail:0000552:e889f255-4122-40ae-aaf8-3b06fb7c2a27", "row_index": 552, "timestamp": "2018-04-18T04:17:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e889f255-4122-40ae-aaf8-3b06fb7c2a27", "eventTime": "2018-04-18T04:17:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: czOat6f63B5u7_y8_5Xn62GQ-mEiLUsQfThe5p-P5zXL-ShbDaV03TT3e5l8HnW5BE5KOXZS9k_enmtH3cWvPtYChq3rbX5wbGCf9uVEhC-PoSdZl_qKL5savKBKSLpPbJ50RbYyOT1lJJ4fGC2tT5fEK1gaURFblfBNrqxYN9IokIOEHpfpgFf4iXXb7Qva-e26p0j4iYY5ZUas7PztckO5tdzFhRGSnAcSP08YG-c3SM3ytvovf0wxhQTsbgluFXEMiq6OzfUz3fuqO2v7P0SM4PK_fVex6NHTZsXqkXbF-d8Q2CcIOrhfFqZwlNG-VXsEBJNKnfMP42rLzqGkH_uSqrzqUS1pobMnBvsFR5ZPLl6R6fCe9y3ct_sLvDXsg45KP0781YP4yu9RHuivJD-DTnOdIqrSzrwSi9CHzEfYqGw5KK8BzEEOJZhIw3REHzi0FDZYrk7ZiG5MtIo8WZQFSR0zAcx1Nt6sKrlJsXPVMPOPNrNx9RdFf9UVT0HJiMLcIwnF5xnXBjQIG8YyKKbKeJ1Np0xgk64A8Of6MYSL8QYGkS1Ya8XET-YsmRLo0wp7mRZUyV9tStCGDuvDzPqoiOhUxMiu5C0Wd4EBPACU7eOOF6b4PwZR8bfp5vrk7Q2IMSWZAI2_WMIXkfwdvwz3TsktjwcvONgl0Q", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-546ae567", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b6ab46c-42e0-4777-8fc6-820562c4ba4", "record_id": "flaws_cloudtrail:0000553:4b6ab46c-42e0-4777-8fc6-820562c4ba4", "row_index": 553, "timestamp": "2018-04-18T04:17:10Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b6ab46c-42e0-4777-8fc6-820562c4ba4", "eventTime": "2018-04-18T04:17:10Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "748e65dc-1f14-4592-b485-119058e040", "record_id": "flaws_cloudtrail:0000554:748e65dc-1f14-4592-b485-119058e040", "row_index": 554, "timestamp": "2018-04-18T04:17:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1825, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "748e65dc-1f14-4592-b485-119058e040", "eventTime": "2018-04-18T04:17:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: LWtuW9LrKi4cKIVBsvqJQz2s9Mvn67MwXcdOfGIG3ur8201voTJUYpMz2-UqN0FSlNLKGtoKmF9pXieBf-XwdD63YQAi2FYBBfv9sirxniSiXlYiwNQWvsuwql1ICluBqrAg5A6wdGGIYWSonyYZsm2SQIt_dOBtYx3dbaRtev1lSl5cFDnip23QlPIHlso4B23gYhhi9_NY9LeEseJoDJNTLqhLuuVAFSoCRjyaWqHpK2Zr26AYR2l4aBhLEDfEeqVL_JLAj_1SamntGXSpssOT3E2NqJ0w0muDUN4ScvWtkfkAQfsgl8qDrrXL1qg1z_5XDmraLAJzTfecY6uPNhIe8Cj5EYp9G0klkFSYm-lgFF6rWpCVjQXhpMdk_gL11nysrONrpPAye65feLHCRNQ2qUY0V1A9P0UNV7eBkXPjT4FckBGppvnqKB657xSqG4keFc6wZDcfC_I8r3rHboGiaiBA0ZhIfGkkDQx-sk85kX5yvHW_YltUYm79hgUTFlyEyUsPWjWyKB-keldB0CdqFWk25ExOtNjrEjrm0tuxbOi09X95ABin2NMaSh0LUXIv7RWdLbNVnXRw_ewdijEI5LCTTVgQWPcQDBOz1sLzW7BHMgbIlggzvKfR5x3a_l4K7uwlQ6kwxOyu9BQfW8aiveehBHtZQg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-dc82b8b9", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a68bef03-8b03-4526-a119-9475e2b808bf", "record_id": "flaws_cloudtrail:0000555:a68bef03-8b03-4526-a119-9475e2b808bf", "row_index": 555, "timestamp": "2018-04-18T04:17:11Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a68bef03-8b03-4526-a119-9475e2b808bf", "eventTime": "2018-04-18T04:17:11Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e72df23e-c52e-413d-a6e3-672516d88dd4", "record_id": "flaws_cloudtrail:0000556:e72df23e-c52e-413d-a6e3-672516d88dd4", "row_index": 556, "timestamp": "2018-04-18T04:17:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1278, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e72df23e-c52e-413d-a6e3-672516d88dd4", "eventTime": "2018-04-18T04:17:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5200fc81-5532-4c7c-a047-26eaa5d2dfa1", "record_id": "flaws_cloudtrail:0000557:5200fc81-5532-4c7c-a047-26eaa5d2dfa1", "row_index": 557, "timestamp": "2018-04-18T04:17:11Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5200fc81-5532-4c7c-a047-26eaa5d2dfa1", "eventTime": "2018-04-18T04:17:11Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ba60e9a-242b-49cd-aaf5-c12a9f90293f", "record_id": "flaws_cloudtrail:0000558:6ba60e9a-242b-49cd-aaf5-c12a9f90293f", "row_index": 558, "timestamp": "2018-04-18T04:17:11Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ba60e9a-242b-49cd-aaf5-c12a9f90293f", "eventTime": "2018-04-18T04:17:11Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da8eaaf9-9378-440e-a6fc-b27f7384d434", "record_id": "flaws_cloudtrail:0000559:da8eaaf9-9378-440e-a6fc-b27f7384d434", "row_index": 559, "timestamp": "2018-04-18T04:17:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1827, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da8eaaf9-9378-440e-a6fc-b27f7384d434", "eventTime": "2018-04-18T04:17:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: YJQMatEVu7J7mKn7FR_lQa7KS9oFO0MSNs1Vom__cuQxpnnKwCon_OphD2ZvWEN1xA8IufR7Y1QOx8H4DxLvT0m9tY0jZW5pborN3dRulFfk0cRPrgbiwPc1YyfG9ngFczM0XQe0SvfN51Ejm1jHMHZ7i5AFXjlMLUb7Wi67vU4hmL_qZCKrLJu5UEaZpl50zpy65_1H7GRz6WWsB0zsoQYTwrhFCDOe0YCDWJRJVSfhTD8nVAsUJxAdMBFvDHLTYSR3HfT_WMPB7qmuPlAWfn_x9QyLLP_n6q5wPBPjZ77HdUSKolqgtXqkFi1MWLDuW3v5l3paXUe40vHuQRxsiBKM2hqFD8TWm-iM1c_aj9ttWkawqj2BsB0-jx8gPUC9ji3gs660Spt_abW1mhVu19UwcX6SRMnLRCIRE-ejHpAo-KSOy6JaThoGRBMEHd40GFvYYBRVUxAAKBFxQ8uvQhzSCDkUf3nUCsfPZXiBiYc9hYc-8maVywexGeiKVrnkEjD2tqk-fNNB6FedzUnLBpaI5UnVP-qs_hL6v7_0OZJTkAG1tCAyzW7RH62_AXlT3kV45PPWIUVWtOk-Xpo880_9wQ5N0YzdqB0mtCAJ4HayehyDlX6L7mRSxklcaL9H-d_qk2d1RoH0EZIYriAx_22uGeUVBzLTNg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-7ef6f0d3", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abc4d358-7330-4c72-83cf-f878bcbba284", "record_id": "flaws_cloudtrail:0000560:abc4d358-7330-4c72-83cf-f878bcbba284", "row_index": 560, "timestamp": "2018-04-18T04:17:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abc4d358-7330-4c72-83cf-f878bcbba284", "eventTime": "2018-04-18T04:17:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac667d35-5447-420b-979f-d78938009917", "record_id": "flaws_cloudtrail:0000561:ac667d35-5447-420b-979f-d78938009917", "row_index": 561, "timestamp": "2018-04-18T04:17:15Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac667d35-5447-420b-979f-d78938009917", "eventTime": "2018-04-18T04:17:15Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07fbdfaa-1e89-41f0-bd42-bef0c59fd9f1", "record_id": "flaws_cloudtrail:0000562:07fbdfaa-1e89-41f0-bd42-bef0c59fd9f1", "row_index": 562, "timestamp": "2018-04-18T04:17:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07fbdfaa-1e89-41f0-bd42-bef0c59fd9f1", "eventTime": "2018-04-18T04:17:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a38943-cf37-463d-b8eb-77274b5a6077", "record_id": "flaws_cloudtrail:0000563:2a38943-cf37-463d-b8eb-77274b5a6077", "row_index": 563, "timestamp": "2018-04-18T04:17:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a38943-cf37-463d-b8eb-77274b5a6077", "eventTime": "2018-04-18T04:17:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e38fd093-7ee1-49dc-9c42-bdac93a5dd14", "record_id": "flaws_cloudtrail:0000564:e38fd093-7ee1-49dc-9c42-bdac93a5dd14", "row_index": 564, "timestamp": "2018-04-18T04:17:16Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e38fd093-7ee1-49dc-9c42-bdac93a5dd14", "eventTime": "2018-04-18T04:17:16Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9da282a-3dda-47f3-b943-7f15015be1", "record_id": "flaws_cloudtrail:0000565:a9da282a-3dda-47f3-b943-7f15015be1", "row_index": 565, "timestamp": "2018-04-18T04:17:16Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9da282a-3dda-47f3-b943-7f15015be1", "eventTime": "2018-04-18T04:17:16Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1a0d3e9-d17a-408a-854d-dff7588a474b", "record_id": "flaws_cloudtrail:0000566:b1a0d3e9-d17a-408a-854d-dff7588a474b", "row_index": 566, "timestamp": "2018-04-18T04:17:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1a0d3e9-d17a-408a-854d-dff7588a474b", "eventTime": "2018-04-18T04:17:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8a9319a-8b81-4571-987c-2bb302ea10f1", "record_id": "flaws_cloudtrail:0000567:c8a9319a-8b81-4571-987c-2bb302ea10f1", "row_index": 567, "timestamp": "2018-04-18T04:17:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8a9319a-8b81-4571-987c-2bb302ea10f1", "eventTime": "2018-04-18T04:17:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afd60cb4-cfb3-4162-937c-6dd933cb55f2", "record_id": "flaws_cloudtrail:0000568:afd60cb4-cfb3-4162-937c-6dd933cb55f2", "row_index": 568, "timestamp": "2018-04-18T04:17:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afd60cb4-cfb3-4162-937c-6dd933cb55f2", "eventTime": "2018-04-18T04:17:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1baf8ec-1bbd-4fc5-b649-1dbd34b289234", "record_id": "flaws_cloudtrail:0000569:c1baf8ec-1bbd-4fc5-b649-1dbd34b289234", "row_index": 569, "timestamp": "2018-04-18T04:17:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1baf8ec-1bbd-4fc5-b649-1dbd34b289234", "eventTime": "2018-04-18T04:17:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc76a6a3-2344-49ff-b279-71c58df988041", "record_id": "flaws_cloudtrail:0000570:bc76a6a3-2344-49ff-b279-71c58df988041", "row_index": 570, "timestamp": "2018-04-18T04:17:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc76a6a3-2344-49ff-b279-71c58df988041", "eventTime": "2018-04-18T04:17:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e545d88-6dcd-4748-8d62-251efdb3b30b", "record_id": "flaws_cloudtrail:0000571:4e545d88-6dcd-4748-8d62-251efdb3b30b", "row_index": 571, "timestamp": "2018-04-18T04:17:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e545d88-6dcd-4748-8d62-251efdb3b30b", "eventTime": "2018-04-18T04:17:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d52a2f9c-947a-408a-adea-75636bfa4b65", "record_id": "flaws_cloudtrail:0000572:d52a2f9c-947a-408a-adea-75636bfa4b65", "row_index": 572, "timestamp": "2018-04-18T04:17:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d52a2f9c-947a-408a-adea-75636bfa4b65", "eventTime": "2018-04-18T04:17:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6e6feec-8dc0-4027-b34a-6daaf739b453", "record_id": "flaws_cloudtrail:0000573:f6e6feec-8dc0-4027-b34a-6daaf739b453", "row_index": 573, "timestamp": "2018-04-18T04:17:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6e6feec-8dc0-4027-b34a-6daaf739b453", "eventTime": "2018-04-18T04:17:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bae1b1fc-9bc0-4d4a-8b70-6c1b105346ce", "record_id": "flaws_cloudtrail:0000574:bae1b1fc-9bc0-4d4a-8b70-6c1b105346ce", "row_index": 574, "timestamp": "2018-04-18T04:17:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bae1b1fc-9bc0-4d4a-8b70-6c1b105346ce", "eventTime": "2018-04-18T04:17:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "947364-5a17-4728-92ef-9a6fbb40676a", "record_id": "flaws_cloudtrail:0000575:947364-5a17-4728-92ef-9a6fbb40676a", "row_index": 575, "timestamp": "2018-04-18T04:17:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "947364-5a17-4728-92ef-9a6fbb40676a", "eventTime": "2018-04-18T04:17:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b86bec48-099d-4054-b000-e085a06f97d4", "record_id": "flaws_cloudtrail:0000576:b86bec48-099d-4054-b000-e085a06f97d4", "row_index": 576, "timestamp": "2018-04-18T04:17:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b86bec48-099d-4054-b000-e085a06f97d4", "eventTime": "2018-04-18T04:17:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a463afcf-8555-4bed-8918-67c5029f08bd", "record_id": "flaws_cloudtrail:0000577:a463afcf-8555-4bed-8918-67c5029f08bd", "row_index": 577, "timestamp": "2018-04-18T04:17:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a463afcf-8555-4bed-8918-67c5029f08bd", "eventTime": "2018-04-18T04:17:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f50eabac-92cd-49c1-be80-a3cba075959af", "record_id": "flaws_cloudtrail:0000578:f50eabac-92cd-49c1-be80-a3cba075959af", "row_index": 578, "timestamp": "2018-04-18T04:17:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f50eabac-92cd-49c1-be80-a3cba075959af", "eventTime": "2018-04-18T04:17:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd26a293-0964-413f-a052-a93e254352d0", "record_id": "flaws_cloudtrail:0000579:fd26a293-0964-413f-a052-a93e254352d0", "row_index": 579, "timestamp": "2018-04-18T04:17:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd26a293-0964-413f-a052-a93e254352d0", "eventTime": "2018-04-18T04:17:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89eedc8b-57cd-4856-9b94-913e3bc249a6", "record_id": "flaws_cloudtrail:0000580:89eedc8b-57cd-4856-9b94-913e3bc249a6", "row_index": 580, "timestamp": "2018-04-18T04:17:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1832, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89eedc8b-57cd-4856-9b94-913e3bc249a6", "eventTime": "2018-04-18T04:17:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ca-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 3gaKK8X30jdiU0qvcxa-jiM75v6Qv7FnUOeh9my0HNlJJZLxvDaDCHxPwQIe7_thkL_6CeR_YOIlwuvIb6G_2mBqpPud6H3YhAXXhiIWogh6vheeNF7tsd1p34YIxS2i3a0lMLiHAdJSoKutBN0CQ7nhESuljhGD7vCfwAjvyK6973-dn_cxMnrE3MIMLvOqDhb52VYp7WbU7rS-AvoeyFli-ZE_GgNncIz5SMHndNwJnPc-TwcWBNpmt9N456Xu0G5EzjtzX5Ezepvrs7I0u8MS-eXgzkbiU7HFfgC-JR4_YKVfvIP_071UK7_9xruK5WEsz27eIED2SVivMPfy3sEEnUMJnByxXj4KN9buayog8jKV0F4WXT9pkQs_101ADamXOVDViZf3OqZKGWmkTKKLUirDlnuvXRt1WlriJSM5ipoejHTgfz3YClpCpOgxU-4mE6gTVzxE18thN0vQ9yVJK8WD7qDj7RT_VG7DygR6RIB_oiG0QIDqaJ6AgOHx880plRnrh1L1N2jEMWqzHYbAY02IQCWgJ9PVEf88JdtudFB4LSODEmD5BSFcQNZ085sdMKe_frUGMg4amRZwTJwg2_t1CeJqjDwY6x0GAhzWLtHrtNXpZ9wVa96VNjxcRv4CihE7V2BUcCcACJgdD8tXeh7Lw4aI5GQr", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-bbcb674a", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cb98cb6-2c99-4ca3-be70-5a2cf50a70d5", "record_id": "flaws_cloudtrail:0000581:5cb98cb6-2c99-4ca3-be70-5a2cf50a70d5", "row_index": 581, "timestamp": "2018-04-18T04:17:22Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cb98cb6-2c99-4ca3-be70-5a2cf50a70d5", "eventTime": "2018-04-18T04:17:22Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adf835e4-88be-4c6d-930c-3d162c3e33a7", "record_id": "flaws_cloudtrail:0000582:adf835e4-88be-4c6d-930c-3d162c3e33a7", "row_index": 582, "timestamp": "2018-04-18T04:17:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1171, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adf835e4-88be-4c6d-930c-3d162c3e33a7", "eventTime": "2018-04-18T04:17:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c788bf89-496c-44e0-b881-c12f09f3951e", "record_id": "flaws_cloudtrail:0000583:c788bf89-496c-44e0-b881-c12f09f3951e", "row_index": 583, "timestamp": "2018-04-18T04:17:22Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c788bf89-496c-44e0-b881-c12f09f3951e", "eventTime": "2018-04-18T04:17:22Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f758302b-e2bb-46b1-b5ba-8cc32c268097", "record_id": "flaws_cloudtrail:0000584:f758302b-e2bb-46b1-b5ba-8cc32c268097", "row_index": 584, "timestamp": "2018-04-18T04:17:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1275, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f758302b-e2bb-46b1-b5ba-8cc32c268097", "eventTime": "2018-04-18T04:17:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aa955b1-120c-46a4-8b91-3bc5c6a8bec7", "record_id": "flaws_cloudtrail:0000585:5aa955b1-120c-46a4-8b91-3bc5c6a8bec7", "row_index": 585, "timestamp": "2018-04-18T04:17:23Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aa955b1-120c-46a4-8b91-3bc5c6a8bec7", "eventTime": "2018-04-18T04:17:23Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01724ee-d58c-4771-bf0b-4de8286f11a3", "record_id": "flaws_cloudtrail:0000586:01724ee-d58c-4771-bf0b-4de8286f11a3", "row_index": 586, "timestamp": "2018-04-18T04:17:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1826, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01724ee-d58c-4771-bf0b-4de8286f11a3", "eventTime": "2018-04-18T04:17:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-east-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: kCOaf4fElb4qBQxRUVtPO_OyhvMSDfekInohXgnPulrXqYa2baXRJx7XiRtTeMBVm0xvqZUrasVkxVjwbsb6HQXBse5cNcTWLCSYaJqvWJdBgNRyI3RiIS-D_vISPT39tJUu-UaTRVIwM_i0-sfb3maFtiAeImbZMNTI9TJLANpH0Xze5jqjidHttOT3NrS7UbHkXg1-yaRA1-kvlBMt1qVQgZ2tUPbcSs1bBQbS8q_puxHDDlueyhGGX3v81Hv_snN_TZXrNhuFOE_QfBsFopnmgWk8dNAby1D75M5JOWXnbL94e9CstW4uUjxj6-mMqHkvD-4Z1xmpDhJwkCNU40zpj2eZgHQlDYhiojiGlGSCU-NeTJM8eIH7YvhDChvSWBUbEIqrKjHByCW7CH6IT6Tcq0zOJFCgQi3Yp7dLqBwAo_x9W8FVHV5zG_7x2THJzmng3bk3WkMX95tOI4bfNxBWDUWs4pbUEna8WSj8uY4jefsO15HLMtEyzvDAu6SygEo1s1pWFMN9pd2vvqQDjxtX0mo53hYtDLl-LlDO8o1fvHTCuPUWameEoR7z7ey8gTfPgm6YFBJQPFef_MV5nVO1_pWjXymHKmk13OnJtiRMkoxdeQ3CB49rgqQtrcL_0TYSYEHnK_cH4LpcVSeTECHhIYXJhKwk2w", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-71cdc376", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4976ebe-6764-4dce-9dc8-ff2a636402e", "record_id": "flaws_cloudtrail:0000587:c4976ebe-6764-4dce-9dc8-ff2a636402e", "row_index": 587, "timestamp": "2018-04-18T04:17:24Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4976ebe-6764-4dce-9dc8-ff2a636402e", "eventTime": "2018-04-18T04:17:24Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36849d8-b093-48bf-803c-94805f4af4af", "record_id": "flaws_cloudtrail:0000588:36849d8-b093-48bf-803c-94805f4af4af", "row_index": 588, "timestamp": "2018-04-18T04:17:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1277, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36849d8-b093-48bf-803c-94805f4af4af", "eventTime": "2018-04-18T04:17:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42ab13c0-6ef9-4b4e-95f2-e0c77c1cf74d", "record_id": "flaws_cloudtrail:0000589:42ab13c0-6ef9-4b4e-95f2-e0c77c1cf74d", "row_index": 589, "timestamp": "2018-04-18T04:17:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1168, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42ab13c0-6ef9-4b4e-95f2-e0c77c1cf74d", "eventTime": "2018-04-18T04:17:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7fd5f74-b09c-455c-91bd-a52b009fd89c", "record_id": "flaws_cloudtrail:0000590:d7fd5f74-b09c-455c-91bd-a52b009fd89c", "row_index": 590, "timestamp": "2018-04-18T04:17:27Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7fd5f74-b09c-455c-91bd-a52b009fd89c", "eventTime": "2018-04-18T04:17:27Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebee3dfe-71f3-47c6-97ff-0a04338eab49", "record_id": "flaws_cloudtrail:0000591:ebee3dfe-71f3-47c6-97ff-0a04338eab49", "row_index": 591, "timestamp": "2018-04-18T04:17:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1829, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebee3dfe-71f3-47c6-97ff-0a04338eab49", "eventTime": "2018-04-18T04:17:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-south-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: uG1pH1hF62A6bACNaqN4uehgTO3XEdXB4cQLjWHj6RchGn4vKPBgxWRjcXeSURQ_Bc6_MpITRqwgskCQ0kUChrLKsBiBbQSKoSTqchnIUBywdRXh-wrO8usGc9JjCFLfTxCoHDzEIU6dWktsbN_M0UdhZVLEWMQlzYVQmW_6UVawhYfenTDGba0reYAQxMdm6cMi0CsgYsvsHjZZIjIhetRnZmJN-lGMCHLAMhab2BTKmlYEjF2VdmAhXe32Iavf3WhoDYgNLwMxTGm7MqvV2kN43nPQvXhDBy0IRH-NpNUzCHaX-gMFFp6RfBqCR3kqJlK0U8sXnZU7QvG9rvC-tBkmRXAUNegwsimvZyRiVL6pr2HY61ZMHgz7pvALXvNCrahsk-0QN9rczlkDxojSs8kLyrkMfMRIQzWvkriDNr0MjcNlBNSgBuVsROIdIflZgOzBir1GeAExiJyJwZVLKn7aIW44ZDMZexEPpLKUHMCSRqcjTxQzaJWPs_M_Yn51sF9J0HRvPMeTIv_q_iZzyNjdETNs2v3SRXZ_L_71PqQJK298pxrYQJtxvwriGBV3WeXYQjvFxQZB_ojuyqFMHFPpapOW70hqlIwvVC3Fw0-HorGgHK0zzVlDms_eAnrJr9YQf7cNTp2YlGYHNIUx_98SVG_BxuwUeJU", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-8c971d21", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae2e1d6f-dbdf-4b9d-9431-2d5a1ad50a3d", "record_id": "flaws_cloudtrail:0000592:ae2e1d6f-dbdf-4b9d-9431-2d5a1ad50a3d", "row_index": 592, "timestamp": "2018-04-18T04:17:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae2e1d6f-dbdf-4b9d-9431-2d5a1ad50a3d", "eventTime": "2018-04-18T04:17:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5efee8b-1077-4f72-85f1-cd668913b", "record_id": "flaws_cloudtrail:0000593:e5efee8b-1077-4f72-85f1-cd668913b", "row_index": 593, "timestamp": "2018-04-18T04:17:28Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5efee8b-1077-4f72-85f1-cd668913b", "eventTime": "2018-04-18T04:17:28Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69a3dd43-42b3-4179-b508-a3e71c4c5aa1", "record_id": "flaws_cloudtrail:0000594:69a3dd43-42b3-4179-b508-a3e71c4c5aa1", "row_index": 594, "timestamp": "2018-04-18T04:17:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69a3dd43-42b3-4179-b508-a3e71c4c5aa1", "eventTime": "2018-04-18T04:17:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53c577ad-1313-4aa3-bf2c-4d768df4ff8a", "record_id": "flaws_cloudtrail:0000595:53c577ad-1313-4aa3-bf2c-4d768df4ff8a", "row_index": 595, "timestamp": "2018-04-18T04:17:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53c577ad-1313-4aa3-bf2c-4d768df4ff8a", "eventTime": "2018-04-18T04:17:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a02708fa-eb29-4ebc-b54f-82233e3a7a29", "record_id": "flaws_cloudtrail:0000596:a02708fa-eb29-4ebc-b54f-82233e3a7a29", "row_index": 596, "timestamp": "2018-04-18T04:17:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a02708fa-eb29-4ebc-b54f-82233e3a7a29", "eventTime": "2018-04-18T04:17:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4377ad36-4518-4ec6-88a5-197006aa27e", "record_id": "flaws_cloudtrail:0000597:4377ad36-4518-4ec6-88a5-197006aa27e", "row_index": 597, "timestamp": "2018-04-18T04:17:29Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4377ad36-4518-4ec6-88a5-197006aa27e", "eventTime": "2018-04-18T04:17:29Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "951d4168-7a6c-4dc4-ac48-a1b5eccf03d9", "record_id": "flaws_cloudtrail:0000598:951d4168-7a6c-4dc4-ac48-a1b5eccf03d9", "row_index": 598, "timestamp": "2018-04-18T04:17:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1274, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "951d4168-7a6c-4dc4-ac48-a1b5eccf03d9", "eventTime": "2018-04-18T04:17:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "us-west-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-009dc204", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "949d647d-5c0b-4613-a1ba-2cd5da436484", "record_id": "flaws_cloudtrail:0000599:949d647d-5c0b-4613-a1ba-2cd5da436484", "row_index": 599, "timestamp": "2018-04-18T04:17:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "949d647d-5c0b-4613-a1ba-2cd5da436484", "eventTime": "2018-04-18T04:17:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a20e1675-2b4c-4064-a2ee-34c1611febf3", "record_id": "flaws_cloudtrail:0000600:a20e1675-2b4c-4064-a2ee-34c1611febf3", "row_index": 600, "timestamp": "2018-04-18T04:17:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a20e1675-2b4c-4064-a2ee-34c1611febf3", "eventTime": "2018-04-18T04:17:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24caa858-e43c-4325-812a-65f107790c83", "record_id": "flaws_cloudtrail:0000601:24caa858-e43c-4325-812a-65f107790c83", "row_index": 601, "timestamp": "2018-04-18T04:17:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24caa858-e43c-4325-812a-65f107790c83", "eventTime": "2018-04-18T04:17:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "ap-southeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-02d34bac", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20ae18a0-92f6-45c8-84af-cea2b2c9ac90", "record_id": "flaws_cloudtrail:0000602:20ae18a0-92f6-45c8-84af-cea2b2c9ac90", "row_index": 602, "timestamp": "2018-04-18T04:17:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20ae18a0-92f6-45c8-84af-cea2b2c9ac90", "eventTime": "2018-04-18T04:17:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-central-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-d10c94e9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "298cc3f5-2fdf-4b60-b4f2-eb1e2f25875", "record_id": "flaws_cloudtrail:0000603:298cc3f5-2fdf-4b60-b4f2-eb1e2f25875", "row_index": 603, "timestamp": "2018-04-18T04:17:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1275, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "298cc3f5-2fdf-4b60-b4f2-eb1e2f25875", "eventTime": "2018-04-18T04:17:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36d6bd63-f80c-4f09-b7cb-743324b77644", "record_id": "flaws_cloudtrail:0000604:36d6bd63-f80c-4f09-b7cb-743324b77644", "row_index": 604, "timestamp": "2018-04-18T04:17:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.63.17.217", "user_agent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36d6bd63-f80c-4f09-b7cb-743324b77644", "eventTime": "2018-04-18T04:17:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.63.17.217", "userAgent": "Boto3/1.7.4 Python/2.7.12 Linux/4.4.0-119-generic Botocore/1.10.4", "awsRegion": "eu-west-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-2b129c1b", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}