Task: attack_reconstruction (flaws_cloudtrail)
Prompt: One principal appears to gain a foothold and then conduct a broad AWS inventory sweep spanning IAM, EC2/VPC, S3, Lambda, and RDS. Identify the responsible principal, the MITRE ATT&CK technique that best describes the behavior, the supporting CloudTrail record_ids grouped by each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d312bbd-1fb3-42ef-80f1-b9c16a5a7184", "record_id": "flaws_cloudtrail:0000000:3d312bbd-1fb3-42ef-80f1-b9c16a5a7184", "row_index": 0, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIAI9RA6BYC6NVKUIIU", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1017, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d312bbd-1fb3-42ef-80f1-b9c16a5a7184", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIAI9RA6BYC6NVKUIIU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "affe67f6-a9e7-42df-8e1d-078416e2a5fc", "record_id": "flaws_cloudtrail:0000001:affe67f6-a9e7-42df-8e1d-078416e2a5fc", "row_index": 1, "timestamp": "2017-05-26T18:30:31Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "affe67f6-a9e7-42df-8e1d-078416e2a5fc", "eventTime": "2017-05-26T18:30:31Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56eb382e-e119-40e3-9e60-aa09ac8b3be8", "record_id": "flaws_cloudtrail:0000002:56eb382e-e119-40e3-9e60-aa09ac8b3be8", "row_index": 2, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1133, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56eb382e-e119-40e3-9e60-aa09ac8b3be8", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adef8920-cedc-42c9-99ea-9448849e47f7", "record_id": "flaws_cloudtrail:0000003:adef8920-cedc-42c9-99ea-9448849e47f7", "row_index": 3, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adef8920-cedc-42c9-99ea-9448849e47f7", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77ccef5d-b404-4998-80f6-7d1ac20372a3", "record_id": "flaws_cloudtrail:0000004:77ccef5d-b404-4998-80f6-7d1ac20372a3", "row_index": 4, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77ccef5d-b404-4998-80f6-7d1ac20372a3", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "799db93b-219f-44d9-901b-8ce39fe71a29", "record_id": "flaws_cloudtrail:0000005:799db93b-219f-44d9-901b-8ce39fe71a29", "row_index": 5, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "799db93b-219f-44d9-901b-8ce39fe71a29", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07c1c7c3-03da-4d33-b4d1-bd72c426923d", "record_id": "flaws_cloudtrail:0000006:07c1c7c3-03da-4d33-b4d1-bd72c426923d", "row_index": 6, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIALMDHVSW3NUR52R4D", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1021, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07c1c7c3-03da-4d33-b4d1-bd72c426923d", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIALMDHVSW3NUR52R4D", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "957e4bf1-0e58-4db7-97cf-c40471b43e89", "record_id": "flaws_cloudtrail:0000007:957e4bf1-0e58-4db7-97cf-c40471b43e89", "row_index": 7, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "957e4bf1-0e58-4db7-97cf-c40471b43e89", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78bbe885-e6be-4348-be8f-0f366121c47f", "record_id": "flaws_cloudtrail:0000008:78bbe885-e6be-4348-be8f-0f366121c47f", "row_index": 8, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1179, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78bbe885-e6be-4348-be8f-0f366121c47f", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fec6449e-e685-4fe4-a801-b1db411962", "record_id": "flaws_cloudtrail:0000009:fec6449e-e685-4fe4-a801-b1db411962", "row_index": 9, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fec6449e-e685-4fe4-a801-b1db411962", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d72845-530a-444a-9d62-ec22db93ea21", "record_id": "flaws_cloudtrail:0000010:d72845-530a-444a-9d62-ec22db93ea21", "row_index": 10, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d72845-530a-444a-9d62-ec22db93ea21", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9117d75-d502-4b39-bf62-211b8de048da", "record_id": "flaws_cloudtrail:0000011:c9117d75-d502-4b39-bf62-211b8de048da", "row_index": 11, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9117d75-d502-4b39-bf62-211b8de048da", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20621d7a-31e6-48fe-a9f0-abea6a8b4664", "record_id": "flaws_cloudtrail:0000012:20621d7a-31e6-48fe-a9f0-abea6a8b4664", "row_index": 12, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20621d7a-31e6-48fe-a9f0-abea6a8b4664", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0845a89a-3f21-488a-ac8f-1f939f563082", "record_id": "flaws_cloudtrail:0000013:0845a89a-3f21-488a-ac8f-1f939f563082", "row_index": 13, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0845a89a-3f21-488a-ac8f-1f939f563082", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7782cdca-90fb-4d63-93cf-d36bfda384df", "record_id": "flaws_cloudtrail:0000014:7782cdca-90fb-4d63-93cf-d36bfda384df", "row_index": 14, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 999, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7782cdca-90fb-4d63-93cf-d36bfda384df", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62b767f5-b59e-49e0-8e96-5ce69145d9df", "record_id": "flaws_cloudtrail:0000015:62b767f5-b59e-49e0-8e96-5ce69145d9df", "row_index": 15, "timestamp": "2017-05-26T18:30:31Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62b767f5-b59e-49e0-8e96-5ce69145d9df", "eventTime": "2017-05-26T18:30:31Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f278725f-bc76-44e9-b1d6-958022e1e72", "record_id": "flaws_cloudtrail:0000016:5f278725f-bc76-44e9-b1d6-958022e1e72", "row_index": 16, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f278725f-bc76-44e9-b1d6-958022e1e72", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72aa5454-e552-4132-9efa-91104c41c51c", "record_id": "flaws_cloudtrail:0000017:72aa5454-e552-4132-9efa-91104c41c51c", "row_index": 17, "timestamp": "2017-05-26T18:30:31Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72aa5454-e552-4132-9efa-91104c41c51c", "eventTime": "2017-05-26T18:30:31Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "092fb0b7-1bac-41ec-a6de-2ca6a8965727", "record_id": "flaws_cloudtrail:0000018:092fb0b7-1bac-41ec-a6de-2ca6a8965727", "row_index": 18, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "092fb0b7-1bac-41ec-a6de-2ca6a8965727", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94664b8-ac73-4178-8fbc-c125dc17ced3", "record_id": "flaws_cloudtrail:0000019:94664b8-ac73-4178-8fbc-c125dc17ced3", "row_index": 19, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94664b8-ac73-4178-8fbc-c125dc17ced3", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa49ba17-55c0-427c-9271-bc36ca3382b5", "record_id": "flaws_cloudtrail:0000020:aa49ba17-55c0-427c-9271-bc36ca3382b5", "row_index": 20, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa49ba17-55c0-427c-9271-bc36ca3382b5", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7999a2a5-9fa3-4fce-bf46-e069c0715a02", "record_id": "flaws_cloudtrail:0000021:7999a2a5-9fa3-4fce-bf46-e069c0715a02", "row_index": 21, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1043, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7999a2a5-9fa3-4fce-bf46-e069c0715a02", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cd91a71-61ed-4e5d-8b44-5fd2c96f2b74", "record_id": "flaws_cloudtrail:0000022:5cd91a71-61ed-4e5d-8b44-5fd2c96f2b74", "row_index": 22, "timestamp": "2017-05-26T18:30:31Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1000, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cd91a71-61ed-4e5d-8b44-5fd2c96f2b74", "eventTime": "2017-05-26T18:30:31Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52ee1085-7258-453a-a4f2-b8221a6ea540", "record_id": "flaws_cloudtrail:0000023:52ee1085-7258-453a-a4f2-b8221a6ea540", "row_index": 23, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52ee1085-7258-453a-a4f2-b8221a6ea540", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2163ee07-5f75-450d-a9ea-51280cad57c8", "record_id": "flaws_cloudtrail:0000024:2163ee07-5f75-450d-a9ea-51280cad57c8", "row_index": 24, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIADO7BYHV90TYZU4WS", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1021, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2163ee07-5f75-450d-a9ea-51280cad57c8", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIADO7BYHV90TYZU4WS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae3b8d05-8c36-4dee-91e7-8f5cf8750be5", "record_id": "flaws_cloudtrail:0000025:ae3b8d05-8c36-4dee-91e7-8f5cf8750be5", "row_index": 25, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae3b8d05-8c36-4dee-91e7-8f5cf8750be5", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a4d667a-af61-44d9-bdfb-04a84bc7f5ca", "record_id": "flaws_cloudtrail:0000026:4a4d667a-af61-44d9-bdfb-04a84bc7f5ca", "row_index": 26, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a4d667a-af61-44d9-bdfb-04a84bc7f5ca", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a9f7613-f75d-47c2-b67f-91c64f1d45e2", "record_id": "flaws_cloudtrail:0000027:5a9f7613-f75d-47c2-b67f-91c64f1d45e2", "row_index": 27, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a9f7613-f75d-47c2-b67f-91c64f1d45e2", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "259d6d4d-b973-47f3-afaa-226dd3206fdf", "record_id": "flaws_cloudtrail:0000028:259d6d4d-b973-47f3-afaa-226dd3206fdf", "row_index": 28, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "259d6d4d-b973-47f3-afaa-226dd3206fdf", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75cb98a7-3d2c-4473-93d1-676b690f0f7a", "record_id": "flaws_cloudtrail:0000029:75cb98a7-3d2c-4473-93d1-676b690f0f7a", "row_index": 29, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75cb98a7-3d2c-4473-93d1-676b690f0f7a", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1bf040f-6439-4ea7-843f-9bcc41bf26cc", "record_id": "flaws_cloudtrail:0000030:f1bf040f-6439-4ea7-843f-9bcc41bf26cc", "row_index": 30, "timestamp": "2017-05-26T18:30:31Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1bf040f-6439-4ea7-843f-9bcc41bf26cc", "eventTime": "2017-05-26T18:30:31Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c39b7ce1-bfab-4215-b5c8-d6545ff37a25", "record_id": "flaws_cloudtrail:0000031:c39b7ce1-bfab-4215-b5c8-d6545ff37a25", "row_index": 31, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1180, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c39b7ce1-bfab-4215-b5c8-d6545ff37a25", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ca25292-b44e-4816-9a9c-37956a64b342", "record_id": "flaws_cloudtrail:0000032:6ca25292-b44e-4816-9a9c-37956a64b342", "row_index": 32, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1000, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ca25292-b44e-4816-9a9c-37956a64b342", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67f95c78-a3ce-49d6-a6f6-833843f775a2c", "record_id": "flaws_cloudtrail:0000033:67f95c78-a3ce-49d6-a6f6-833843f775a2c", "row_index": 33, "timestamp": "2017-05-26T18:30:31Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1001, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67f95c78-a3ce-49d6-a6f6-833843f775a2c", "eventTime": "2017-05-26T18:30:31Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fad1e6dc-bb7b-4f29-a540-c0c3e348b9b9", "record_id": "flaws_cloudtrail:0000034:fad1e6dc-bb7b-4f29-a540-c0c3e348b9b9", "row_index": 34, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fad1e6dc-bb7b-4f29-a540-c0c3e348b9b9", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1c97421-d0fc-4404-97a2-4a187da0dd0d", "record_id": "flaws_cloudtrail:0000035:e1c97421-d0fc-4404-97a2-4a187da0dd0d", "row_index": 35, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1c97421-d0fc-4404-97a2-4a187da0dd0d", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e7f273a-2d86-4033-a443-0582b31710", "record_id": "flaws_cloudtrail:0000036:1e7f273a-2d86-4033-a443-0582b31710", "row_index": 36, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1025, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e7f273a-2d86-4033-a443-0582b31710", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8231bca8-3513-4fc8-bc1e-2ef3ba968c7a", "record_id": "flaws_cloudtrail:0000037:8231bca8-3513-4fc8-bc1e-2ef3ba968c7a", "row_index": 37, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8231bca8-3513-4fc8-bc1e-2ef3ba968c7a", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca62ad31-5f3d-40c3-8726-b7cebb08e213", "record_id": "flaws_cloudtrail:0000038:ca62ad31-5f3d-40c3-8726-b7cebb08e213", "row_index": 38, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIANTFJVIUY18NW3DGB", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1017, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca62ad31-5f3d-40c3-8726-b7cebb08e213", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIANTFJVIUY18NW3DGB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c77c57e0-3b56-4de6-8c6d-e5d8da53c79f", "record_id": "flaws_cloudtrail:0000039:c77c57e0-3b56-4de6-8c6d-e5d8da53c79f", "row_index": 39, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c77c57e0-3b56-4de6-8c6d-e5d8da53c79f", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be064903-ed6e-4dad-97a7-13700c993", "record_id": "flaws_cloudtrail:0000040:be064903-ed6e-4dad-97a7-13700c993", "row_index": 40, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1173, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be064903-ed6e-4dad-97a7-13700c993", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5f17dae-6569-45d6-aff7-4e9d2c6b2ffe", "record_id": "flaws_cloudtrail:0000041:b5f17dae-6569-45d6-aff7-4e9d2c6b2ffe", "row_index": 41, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5f17dae-6569-45d6-aff7-4e9d2c6b2ffe", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87a1763e-4dd6-4a5a-a8ba-38808384d818", "record_id": "flaws_cloudtrail:0000042:87a1763e-4dd6-4a5a-a8ba-38808384d818", "row_index": 42, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87a1763e-4dd6-4a5a-a8ba-38808384d818", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2386f0d5-b052-432b-8e68-342001c8a51", "record_id": "flaws_cloudtrail:0000043:2386f0d5-b052-432b-8e68-342001c8a51", "row_index": 43, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2386f0d5-b052-432b-8e68-342001c8a51", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d173a155-4cdd-4e60-8461-c2a20361e1d", "record_id": "flaws_cloudtrail:0000044:d173a155-4cdd-4e60-8461-c2a20361e1d", "row_index": 44, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d173a155-4cdd-4e60-8461-c2a20361e1d", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bc3852f-590e-4aac-9278-6088ae5e71e8", "record_id": "flaws_cloudtrail:0000045:0bc3852f-590e-4aac-9278-6088ae5e71e8", "row_index": 45, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1135, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bc3852f-590e-4aac-9278-6088ae5e71e8", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cac737f-a5b2-4477-9d30-e3d0fea10414", "record_id": "flaws_cloudtrail:0000046:7cac737f-a5b2-4477-9d30-e3d0fea10414", "row_index": 46, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1025, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cac737f-a5b2-4477-9d30-e3d0fea10414", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10fc1e61-4ec1-4f3c-a3a3-45822ba627c", "record_id": "flaws_cloudtrail:0000047:10fc1e61-4ec1-4f3c-a3a3-45822ba627c", "row_index": 47, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10fc1e61-4ec1-4f3c-a3a3-45822ba627c", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1126b9f-b988-41d1-b2b8-a054628ee7", "record_id": "flaws_cloudtrail:0000048:f1126b9f-b988-41d1-b2b8-a054628ee7", "row_index": 48, "timestamp": "2017-05-26T18:30:31Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1126b9f-b988-41d1-b2b8-a054628ee7", "eventTime": "2017-05-26T18:30:31Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74186d43-40d2-454f-96c2-fbbc89893a", "record_id": "flaws_cloudtrail:0000049:74186d43-40d2-454f-96c2-fbbc89893a", "row_index": 49, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74186d43-40d2-454f-96c2-fbbc89893a", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bf5626e-75b6-40d8-a827-8a75edcd38b5", "record_id": "flaws_cloudtrail:0000050:0bf5626e-75b6-40d8-a827-8a75edcd38b5", "row_index": 50, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bf5626e-75b6-40d8-a827-8a75edcd38b5", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0937b4d3-c0ca-4ab6-99c4-38c761730f9eb", "record_id": "flaws_cloudtrail:0000051:0937b4d3-c0ca-4ab6-99c4-38c761730f9eb", "row_index": 51, "timestamp": "2017-05-26T18:30:31Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0937b4d3-c0ca-4ab6-99c4-38c761730f9eb", "eventTime": "2017-05-26T18:30:31Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1aea3148-896b-47fa-abac-aac55a59d882", "record_id": "flaws_cloudtrail:0000052:1aea3148-896b-47fa-abac-aac55a59d882", "row_index": 52, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1aea3148-896b-47fa-abac-aac55a59d882", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eea2327c-2743-4e3a-bb4b-0e5783869bcc", "record_id": "flaws_cloudtrail:0000053:eea2327c-2743-4e3a-bb4b-0e5783869bcc", "row_index": 53, "timestamp": "2017-05-26T18:30:31Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eea2327c-2743-4e3a-bb4b-0e5783869bcc", "eventTime": "2017-05-26T18:30:31Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"identityType": "Domain"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d04c2df9-557e-4561-8db3-17b660522fd", "record_id": "flaws_cloudtrail:0000054:d04c2df9-557e-4561-8db3-17b660522fd", "row_index": 54, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1174, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d04c2df9-557e-4561-8db3-17b660522fd", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8e3b343-c57a-40b1-ba1a-c538e1fc2284", "record_id": "flaws_cloudtrail:0000055:f8e3b343-c57a-40b1-ba1a-c538e1fc2284", "row_index": 55, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8e3b343-c57a-40b1-ba1a-c538e1fc2284", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82a339eb-3d36-41db-bd0f-e46100c84e5e", "record_id": "flaws_cloudtrail:0000056:82a339eb-3d36-41db-bd0f-e46100c84e5e", "row_index": 56, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82a339eb-3d36-41db-bd0f-e46100c84e5e", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b81644-b17c-48a3-9c92-9ccc436b5dfa", "record_id": "flaws_cloudtrail:0000057:8b81644-b17c-48a3-9c92-9ccc436b5dfa", "row_index": 57, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIAQSTD0JIEHAROFVQO", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b81644-b17c-48a3-9c92-9ccc436b5dfa", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIAQSTD0JIEHAROFVQO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9eda7db5-46fe-4414-89fd-3f99bbb97a34", "record_id": "flaws_cloudtrail:0000058:9eda7db5-46fe-4414-89fd-3f99bbb97a34", "row_index": 58, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9eda7db5-46fe-4414-89fd-3f99bbb97a34", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70268-7b25-4d4f-8731-fa411cf6f189", "record_id": "flaws_cloudtrail:0000059:70268-7b25-4d4f-8731-fa411cf6f189", "row_index": 59, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70268-7b25-4d4f-8731-fa411cf6f189", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f3bec5c-81be-4e7d-8b10-8204b5ec7b67", "record_id": "flaws_cloudtrail:0000060:6f3bec5c-81be-4e7d-8b10-8204b5ec7b67", "row_index": 60, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f3bec5c-81be-4e7d-8b10-8204b5ec7b67", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b2e9bb6-5a2a-401b-ae21-893e6f359d19", "record_id": "flaws_cloudtrail:0000061:3b2e9bb6-5a2a-401b-ae21-893e6f359d19", "row_index": 61, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b2e9bb6-5a2a-401b-ae21-893e6f359d19", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "627bca29-4d2e-42bb-bd11-e22fae6b4db1", "record_id": "flaws_cloudtrail:0000062:627bca29-4d2e-42bb-bd11-e22fae6b4db1", "row_index": 62, "timestamp": "2017-05-26T18:30:31Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "627bca29-4d2e-42bb-bd11-e22fae6b4db1", "eventTime": "2017-05-26T18:30:31Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c48c191-3774-46e9-bc30-bbd9ed9ea00b", "record_id": "flaws_cloudtrail:0000063:0c48c191-3774-46e9-bc30-bbd9ed9ea00b", "row_index": 63, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1130, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c48c191-3774-46e9-bc30-bbd9ed9ea00b", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a735927-800d-4713-ba82-014fb65446f", "record_id": "flaws_cloudtrail:0000064:8a735927-800d-4713-ba82-014fb65446f", "row_index": 64, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1037, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a735927-800d-4713-ba82-014fb65446f", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28859b8-ab06-4292-952e-8535495054e0", "record_id": "flaws_cloudtrail:0000065:28859b8-ab06-4292-952e-8535495054e0", "row_index": 65, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28859b8-ab06-4292-952e-8535495054e0", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6d1aa95-57e1-46a2-a093-dfd60745c4e", "record_id": "flaws_cloudtrail:0000066:d6d1aa95-57e1-46a2-a093-dfd60745c4e", "row_index": 66, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6d1aa95-57e1-46a2-a093-dfd60745c4e", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfd8db62-ea8f-48e5-9675-d8a17bc7e91c", "record_id": "flaws_cloudtrail:0000067:dfd8db62-ea8f-48e5-9675-d8a17bc7e91c", "row_index": 67, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfd8db62-ea8f-48e5-9675-d8a17bc7e91c", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53bc3793-15a1-4466-93ab-280dd26ec62e", "record_id": "flaws_cloudtrail:0000068:53bc3793-15a1-4466-93ab-280dd26ec62e", "row_index": 68, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1175, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53bc3793-15a1-4466-93ab-280dd26ec62e", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0d8b53e-bbb7-4682-aed6-d330e5eab092", "record_id": "flaws_cloudtrail:0000069:b0d8b53e-bbb7-4682-aed6-d330e5eab092", "row_index": 69, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0d8b53e-bbb7-4682-aed6-d330e5eab092", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a6608fe-ee60-4a6d-b966-962017cb1e4a", "record_id": "flaws_cloudtrail:0000070:6a6608fe-ee60-4a6d-b966-962017cb1e4a", "row_index": 70, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a6608fe-ee60-4a6d-b966-962017cb1e4a", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c1ea2ec-1c8e-47a9-873c-2666dd3c9e15", "record_id": "flaws_cloudtrail:0000071:9c1ea2ec-1c8e-47a9-873c-2666dd3c9e15", "row_index": 71, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1036, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c1ea2ec-1c8e-47a9-873c-2666dd3c9e15", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca4e97c1-5354-4244-9b5f-e3196c02135a", "record_id": "flaws_cloudtrail:0000072:ca4e97c1-5354-4244-9b5f-e3196c02135a", "row_index": 72, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1130, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca4e97c1-5354-4244-9b5f-e3196c02135a", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5394e7cf-2185-40b3-a200-b378da3f0387", "record_id": "flaws_cloudtrail:0000073:5394e7cf-2185-40b3-a200-b378da3f0387", "row_index": 73, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5394e7cf-2185-40b3-a200-b378da3f0387", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "903723d-f48c-4acd-8ce0-67d058ba9c4f", "record_id": "flaws_cloudtrail:0000074:903723d-f48c-4acd-8ce0-67d058ba9c4f", "row_index": 74, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1020, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "903723d-f48c-4acd-8ce0-67d058ba9c4f", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98e9b881-4170-4c8a-b9b5-d24f09a73892", "record_id": "flaws_cloudtrail:0000075:98e9b881-4170-4c8a-b9b5-d24f09a73892", "row_index": 75, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIAERJE3EANK7C7QYHN", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1015, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98e9b881-4170-4c8a-b9b5-d24f09a73892", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIAERJE3EANK7C7QYHN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4e809a2-4c3e-43aa-98bc-b5e73de03405", "record_id": "flaws_cloudtrail:0000076:d4e809a2-4c3e-43aa-98bc-b5e73de03405", "row_index": 76, "timestamp": "2017-05-26T18:30:31Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4e809a2-4c3e-43aa-98bc-b5e73de03405", "eventTime": "2017-05-26T18:30:31Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8c0f1be-a144-4c22-92b1-2d00219", "record_id": "flaws_cloudtrail:0000077:e8c0f1be-a144-4c22-92b1-2d00219", "row_index": 77, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8c0f1be-a144-4c22-92b1-2d00219", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcadb040-c577-439f-9597-ef9aa323f74a", "record_id": "flaws_cloudtrail:0000078:fcadb040-c577-439f-9597-ef9aa323f74a", "row_index": 78, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcadb040-c577-439f-9597-ef9aa323f74a", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2eba189-f942-4c4a-bd33-5fa97588d3cc", "record_id": "flaws_cloudtrail:0000079:f2eba189-f942-4c4a-bd33-5fa97588d3cc", "row_index": 79, "timestamp": "2017-05-26T18:30:31Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2eba189-f942-4c4a-bd33-5fa97588d3cc", "eventTime": "2017-05-26T18:30:31Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9e496911-8363-41e6-af95-f697225e8db9", "record_id": "flaws_cloudtrail:0000080:d9e496911-8363-41e6-af95-f697225e8db9", "row_index": 80, "timestamp": "2017-05-26T18:30:31Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9e496911-8363-41e6-af95-f697225e8db9", "eventTime": "2017-05-26T18:30:31Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1628d8a-38d0-4dd5-b862-fb9f9e498118a", "record_id": "flaws_cloudtrail:0000081:b1628d8a-38d0-4dd5-b862-fb9f9e498118a", "row_index": 81, "timestamp": "2017-05-26T18:30:31Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1628d8a-38d0-4dd5-b862-fb9f9e498118a", "eventTime": "2017-05-26T18:30:31Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a1dd5ea-f3cb-49e3-ba8e-bfb311d83dff", "record_id": "flaws_cloudtrail:0000082:1a1dd5ea-f3cb-49e3-ba8e-bfb311d83dff", "row_index": 82, "timestamp": "2017-05-26T18:30:31Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a1dd5ea-f3cb-49e3-ba8e-bfb311d83dff", "eventTime": "2017-05-26T18:30:31Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3a82cb3-dda9-4b9d-a81b-fa6708e812b1", "record_id": "flaws_cloudtrail:0000083:c3a82cb3-dda9-4b9d-a81b-fa6708e812b1", "row_index": 83, "timestamp": "2017-05-26T18:30:31Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3a82cb3-dda9-4b9d-a81b-fa6708e812b1", "eventTime": "2017-05-26T18:30:31Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4de646663-1737-4c82-afad-95650e8b5c3c", "record_id": "flaws_cloudtrail:0000084:4de646663-1737-4c82-afad-95650e8b5c3c", "row_index": 84, "timestamp": "2017-05-26T18:30:31Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4de646663-1737-4c82-afad-95650e8b5c3c", "eventTime": "2017-05-26T18:30:31Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"identityType": "Domain"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3e6eca3-64e2-4b00-b9f8-b8ce83e6a089", "record_id": "flaws_cloudtrail:0000085:e3e6eca3-64e2-4b00-b9f8-b8ce83e6a089", "row_index": 85, "timestamp": "2017-05-26T18:30:32Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3e6eca3-64e2-4b00-b9f8-b8ce83e6a089", "eventTime": "2017-05-26T18:30:32Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5db3564b-da32-4f9d-9a88-04c77ce1bd41", "record_id": "flaws_cloudtrail:0000086:5db3564b-da32-4f9d-9a88-04c77ce1bd41", "row_index": 86, "timestamp": "2017-05-26T18:30:32Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5db3564b-da32-4f9d-9a88-04c77ce1bd41", "eventTime": "2017-05-26T18:30:32Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "354557c9d-f512-42d6-97d1-8664c7d6ee0b", "record_id": "flaws_cloudtrail:0000087:354557c9d-f512-42d6-97d1-8664c7d6ee0b", "row_index": 87, "timestamp": "2017-05-26T18:30:32Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "354557c9d-f512-42d6-97d1-8664c7d6ee0b", "eventTime": "2017-05-26T18:30:32Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "271c0c93-268c-405d-898e-394a4422817e", "record_id": "flaws_cloudtrail:0000088:271c0c93-268c-405d-898e-394a4422817e", "row_index": 88, "timestamp": "2017-05-26T18:30:32Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "271c0c93-268c-405d-898e-394a4422817e", "eventTime": "2017-05-26T18:30:32Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5677a1cd-f341-4fa3-b973-392a1dd3f5b2", "record_id": "flaws_cloudtrail:0000089:5677a1cd-f341-4fa3-b973-392a1dd3f5b2", "row_index": 89, "timestamp": "2017-05-26T18:30:32Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5677a1cd-f341-4fa3-b973-392a1dd3f5b2", "eventTime": "2017-05-26T18:30:32Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d3df965-d63d-4a5b-9163-a1ec7beb151a", "record_id": "flaws_cloudtrail:0000090:7d3df965-d63d-4a5b-9163-a1ec7beb151a", "row_index": 90, "timestamp": "2017-05-26T18:30:32Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d3df965-d63d-4a5b-9163-a1ec7beb151a", "eventTime": "2017-05-26T18:30:32Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0942dd7-d7ee-4958-ae3a-2663bc1b5d50", "record_id": "flaws_cloudtrail:0000091:a0942dd7-d7ee-4958-ae3a-2663bc1b5d50", "row_index": 91, "timestamp": "2017-05-26T18:30:32Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0942dd7-d7ee-4958-ae3a-2663bc1b5d50", "eventTime": "2017-05-26T18:30:32Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab37873-eeeb-48cf-be84-cf655772f6bae", "record_id": "flaws_cloudtrail:0000092:ab37873-eeeb-48cf-be84-cf655772f6bae", "row_index": 92, "timestamp": "2017-05-26T18:30:32Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab37873-eeeb-48cf-be84-cf655772f6bae", "eventTime": "2017-05-26T18:30:32Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cfe466c-ff7c-4225-8def-d88ea6397f7c", "record_id": "flaws_cloudtrail:0000093:8cfe466c-ff7c-4225-8def-d88ea6397f7c", "row_index": 93, "timestamp": "2017-05-26T18:30:32Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cfe466c-ff7c-4225-8def-d88ea6397f7c", "eventTime": "2017-05-26T18:30:32Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91826c5-8def-4b3a-baa8-382c61db68a9", "record_id": "flaws_cloudtrail:0000094:91826c5-8def-4b3a-baa8-382c61db68a9", "row_index": 94, "timestamp": "2017-05-26T18:30:32Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91826c5-8def-4b3a-baa8-382c61db68a9", "eventTime": "2017-05-26T18:30:32Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d583f58-3960-4088-938f-64df225a0a5f", "record_id": "flaws_cloudtrail:0000095:9d583f58-3960-4088-938f-64df225a0a5f", "row_index": 95, "timestamp": "2017-05-26T18:30:32Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d583f58-3960-4088-938f-64df225a0a5f", "eventTime": "2017-05-26T18:30:32Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a0d3f59-7701-451c-87bd-0e43abf44da5", "record_id": "flaws_cloudtrail:0000096:1a0d3f59-7701-451c-87bd-0e43abf44da5", "row_index": 96, "timestamp": "2017-05-26T18:30:32Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a0d3f59-7701-451c-87bd-0e43abf44da5", "eventTime": "2017-05-26T18:30:32Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a08ea8a8-7343-47bf-b5df-3f97cf6c7684", "record_id": "flaws_cloudtrail:0000097:a08ea8a8-7343-47bf-b5df-3f97cf6c7684", "row_index": 97, "timestamp": "2017-05-26T18:30:32Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a08ea8a8-7343-47bf-b5df-3f97cf6c7684", "eventTime": "2017-05-26T18:30:32Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0ae05aa-95d9-4725-ac55-e104e40c3e65", "record_id": "flaws_cloudtrail:0000098:f0ae05aa-95d9-4725-ac55-e104e40c3e65", "row_index": 98, "timestamp": "2017-05-26T18:30:33Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0ae05aa-95d9-4725-ac55-e104e40c3e65", "eventTime": "2017-05-26T18:30:33Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93cf008d-c8b1-49ba-9bf8-2da3ffd27d61", "record_id": "flaws_cloudtrail:0000099:93cf008d-c8b1-49ba-9bf8-2da3ffd27d61", "row_index": 99, "timestamp": "2017-05-26T18:30:39Z", "event_type": "ListSSHPublicKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93cf008d-c8b1-49ba-9bf8-2da3ffd27d61", "eventTime": "2017-05-26T18:30:39Z", "eventName": "ListSSHPublicKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"userName": "piper"}, "responseElements": {"sSHPublicKeys": [], "isTruncated": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c1951f9-f0c9-4651-a2c2-7dcc6164c243", "record_id": "flaws_cloudtrail:0000100:9c1951f9-f0c9-4651-a2c2-7dcc6164c243", "row_index": 100, "timestamp": "2017-05-26T18:30:39Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c1951f9-f0c9-4651-a2c2-7dcc6164c243", "eventTime": "2017-05-26T18:30:39Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "879939d17-8a35-443d-9fd9-c4dd125cc969", "record_id": "flaws_cloudtrail:0000101:879939d17-8a35-443d-9fd9-c4dd125cc969", "row_index": 101, "timestamp": "2017-05-26T18:30:39Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "879939d17-8a35-443d-9fd9-c4dd125cc969", "eventTime": "2017-05-26T18:30:39Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3c34e75-a900-4a4b-88ad-0a7be88b5b73", "record_id": "flaws_cloudtrail:0000102:e3c34e75-a900-4a4b-88ad-0a7be88b5b73", "row_index": 102, "timestamp": "2017-05-26T18:30:39Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3c34e75-a900-4a4b-88ad-0a7be88b5b73", "eventTime": "2017-05-26T18:30:39Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "769d69f0-e792-4618-b867-0f144215", "record_id": "flaws_cloudtrail:0000103:769d69f0-e792-4618-b867-0f144215", "row_index": 103, "timestamp": "2017-05-26T18:30:39Z", "event_type": "ListSSHPublicKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "769d69f0-e792-4618-b867-0f144215", "eventTime": "2017-05-26T18:30:39Z", "eventName": "ListSSHPublicKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"userName": "backup"}, "responseElements": {"sSHPublicKeys": [], "isTruncated": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44f6c123-806f-46d1-8a19-c5c6217ebf64", "record_id": "flaws_cloudtrail:0000104:44f6c123-806f-46d1-8a19-c5c6217ebf64", "row_index": 104, "timestamp": "2017-05-26T18:30:39Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44f6c123-806f-46d1-8a19-c5c6217ebf64", "eventTime": "2017-05-26T18:30:39Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdfc216b-91bd-4f96-a1ff-8964b6114f29", "record_id": "flaws_cloudtrail:0000105:cdfc216b-91bd-4f96-a1ff-8964b6114f29", "row_index": 105, "timestamp": "2017-05-26T18:30:39Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdfc216b-91bd-4f96-a1ff-8964b6114f29", "eventTime": "2017-05-26T18:30:39Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45abe9cb-b461-466c-9bb7-dba0b83a59fb", "record_id": "flaws_cloudtrail:0000106:45abe9cb-b461-466c-9bb7-dba0b83a59fb", "row_index": 106, "timestamp": "2017-05-26T18:30:39Z", "event_type": "ListSSHPublicKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45abe9cb-b461-466c-9bb7-dba0b83a59fb", "eventTime": "2017-05-26T18:30:39Z", "eventName": "ListSSHPublicKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"userName": "Level6"}, "responseElements": {"sSHPublicKeys": [], "isTruncated": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3f842cc-455e-4177-b2a6-f43a199ebf4c", "record_id": "flaws_cloudtrail:0000107:e3f842cc-455e-4177-b2a6-f43a199ebf4c", "row_index": 107, "timestamp": "2017-05-26T18:30:39Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3f842cc-455e-4177-b2a6-f43a199ebf4c", "eventTime": "2017-05-26T18:30:39Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ce3582d-8650-433e-b0d4-495473b", "record_id": "flaws_cloudtrail:0000108:4ce3582d-8650-433e-b0d4-495473b", "row_index": 108, "timestamp": "2017-05-26T18:30:39Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ce3582d-8650-433e-b0d4-495473b", "eventTime": "2017-05-26T18:30:39Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5b2795e-f4bb-4cc3-ac83-af0ea7c386d2", "record_id": "flaws_cloudtrail:0000109:c5b2795e-f4bb-4cc3-ac83-af0ea7c386d2", "row_index": 109, "timestamp": "2017-05-26T18:30:39Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5b2795e-f4bb-4cc3-ac83-af0ea7c386d2", "eventTime": "2017-05-26T18:30:39Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d19a43e5-6a58-4117-b6ea-6ffd05067030", "record_id": "flaws_cloudtrail:0000110:d19a43e5-6a58-4117-b6ea-6ffd05067030", "row_index": 110, "timestamp": "2017-05-26T18:30:39Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d19a43e5-6a58-4117-b6ea-6ffd05067030", "eventTime": "2017-05-26T18:30:39Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2ab03f8-a317-4192-9b7d-05dedf7fbc9d", "record_id": "flaws_cloudtrail:0000111:a2ab03f8-a317-4192-9b7d-05dedf7fbc9d", "row_index": 111, "timestamp": "2017-05-26T18:30:39Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 999, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2ab03f8-a317-4192-9b7d-05dedf7fbc9d", "eventTime": "2017-05-26T18:30:39Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5d286c5-aeb0-4e61-a2c2-b9b7642bca94", "record_id": "flaws_cloudtrail:0000112:d5d286c5-aeb0-4e61-a2c2-b9b7642bca94", "row_index": 112, "timestamp": "2017-05-26T18:30:39Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5d286c5-aeb0-4e61-a2c2-b9b7642bca94", "eventTime": "2017-05-26T18:30:39Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "973512-d603-4506-af15-845ecf35f9c1", "record_id": "flaws_cloudtrail:0000113:973512-d603-4506-af15-845ecf35f9c1", "row_index": 113, "timestamp": "2017-05-26T18:30:39Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "973512-d603-4506-af15-845ecf35f9c1", "eventTime": "2017-05-26T18:30:39Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84fecedc-9a4e-412e-9220-18ee1a1d8881", "record_id": "flaws_cloudtrail:0000114:84fecedc-9a4e-412e-9220-18ee1a1d8881", "row_index": 114, "timestamp": "2017-05-26T18:30:39Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84fecedc-9a4e-412e-9220-18ee1a1d8881", "eventTime": "2017-05-26T18:30:39Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0edc2a90-7247-40ff-9e83-6b5271f88c3a", "record_id": "flaws_cloudtrail:0000115:0edc2a90-7247-40ff-9e83-6b5271f88c3a", "row_index": 115, "timestamp": "2017-05-26T18:30:39Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": null, "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 956, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0edc2a90-7247-40ff-9e83-6b5271f88c3a", "eventTime": "2017-05-26T18:30:39Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14f9c93c-35d6-433e-b148-865c811630f", "record_id": "flaws_cloudtrail:0000116:14f9c93c-35d6-433e-b148-865c811630f", "row_index": 116, "timestamp": "2017-05-26T18:30:40Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14f9c93c-35d6-433e-b148-865c811630f", "eventTime": "2017-05-26T18:30:40Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8848e1cf-6e14-4602-a729-c0fd192f681d", "record_id": "flaws_cloudtrail:0000117:8848e1cf-6e14-4602-a729-c0fd192f681d", "row_index": 117, "timestamp": "2017-05-26T18:30:40Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8848e1cf-6e14-4602-a729-c0fd192f681d", "eventTime": "2017-05-26T18:30:40Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c229e69-b1aa-45fa-b04e-36deaf8bbb55", "record_id": "flaws_cloudtrail:0000118:5c229e69-b1aa-45fa-b04e-36deaf8bbb55", "row_index": 118, "timestamp": "2017-05-26T18:30:40Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c229e69-b1aa-45fa-b04e-36deaf8bbb55", "eventTime": "2017-05-26T18:30:40Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc55724-e60e-4759-9197-2eb6c21cf83e", "record_id": "flaws_cloudtrail:0000119:bc55724-e60e-4759-9197-2eb6c21cf83e", "row_index": 119, "timestamp": "2017-05-26T18:30:40Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc55724-e60e-4759-9197-2eb6c21cf83e", "eventTime": "2017-05-26T18:30:40Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "590e5f76-afff-4b99-a73a-01f348125698", "record_id": "flaws_cloudtrail:0000120:590e5f76-afff-4b99-a73a-01f348125698", "row_index": 120, "timestamp": "2017-05-26T18:30:40Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "590e5f76-afff-4b99-a73a-01f348125698", "eventTime": "2017-05-26T18:30:40Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "545ea30d-b89b-46f3-bba3-ba349021d5217", "record_id": "flaws_cloudtrail:0000121:545ea30d-b89b-46f3-bba3-ba349021d5217", "row_index": 121, "timestamp": "2017-05-26T18:30:40Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "545ea30d-b89b-46f3-bba3-ba349021d5217", "eventTime": "2017-05-26T18:30:40Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b32f7d07-722f-4c54-9d11-774af828ac4b", "record_id": "flaws_cloudtrail:0000122:b32f7d07-722f-4c54-9d11-774af828ac4b", "row_index": 122, "timestamp": "2017-05-26T18:30:40Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b32f7d07-722f-4c54-9d11-774af828ac4b", "eventTime": "2017-05-26T18:30:40Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b03c12ea-517b-4eb5-b057-78550b1946ae", "record_id": "flaws_cloudtrail:0000123:b03c12ea-517b-4eb5-b057-78550b1946ae", "row_index": 123, "timestamp": "2017-05-26T18:30:40Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1075, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b03c12ea-517b-4eb5-b057-78550b1946ae", "eventTime": "2017-05-26T18:30:40Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e2d1303-dbf6-4629-8160-2a59361fb3", "record_id": "flaws_cloudtrail:0000124:5e2d1303-dbf6-4629-8160-2a59361fb3", "row_index": 124, "timestamp": "2017-05-26T18:30:40Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e2d1303-dbf6-4629-8160-2a59361fb3", "eventTime": "2017-05-26T18:30:40Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b419b8ec-7a7f-4881-8775-715b7b7ec8dd", "record_id": "flaws_cloudtrail:0000125:b419b8ec-7a7f-4881-8775-715b7b7ec8dd", "row_index": 125, "timestamp": "2017-05-26T18:30:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": null, "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 948, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b419b8ec-7a7f-4881-8775-715b7b7ec8dd", "eventTime": "2017-05-26T18:30:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c17ec89d-6277-4080-8e3e-f327755ea144", "record_id": "flaws_cloudtrail:0000126:c17ec89d-6277-4080-8e3e-f327755ea144", "row_index": 126, "timestamp": "2017-05-26T18:30:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": null, "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c17ec89d-6277-4080-8e3e-f327755ea144", "eventTime": "2017-05-26T18:30:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "083a9349-5abd-4300-925e-da592184aef4", "record_id": "flaws_cloudtrail:0000127:083a9349-5abd-4300-925e-da592184aef4", "row_index": 127, "timestamp": "2017-05-26T18:30:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": null, "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "083a9349-5abd-4300-925e-da592184aef4", "eventTime": "2017-05-26T18:30:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67f4710b-0140-43cc-baf8-9c6d98a712f3", "record_id": "flaws_cloudtrail:0000128:67f4710b-0140-43cc-baf8-9c6d98a712f3", "row_index": 128, "timestamp": "2017-05-26T18:30:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": null, "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67f4710b-0140-43cc-baf8-9c6d98a712f3", "eventTime": "2017-05-26T18:30:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8768f2ef-95dd-4abe-aefd-4f86385d8ae6", "record_id": "flaws_cloudtrail:0000129:8768f2ef-95dd-4abe-aefd-4f86385d8ae6", "row_index": 129, "timestamp": "2017-05-26T18:30:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": null, "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8768f2ef-95dd-4abe-aefd-4f86385d8ae6", "eventTime": "2017-05-26T18:30:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30835-ffd1-4bdb-b010-e22185b02b0e", "record_id": "flaws_cloudtrail:0000130:30835-ffd1-4bdb-b010-e22185b02b0e", "row_index": 130, "timestamp": "2017-05-26T18:30:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": null, "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30835-ffd1-4bdb-b010-e22185b02b0e", "eventTime": "2017-05-26T18:30:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "638c0604-6c05-409f-a464-530535cb9f3bd", "record_id": "flaws_cloudtrail:0000131:638c0604-6c05-409f-a464-530535cb9f3bd", "row_index": 131, "timestamp": "2017-05-26T18:30:40Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": null, "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 963, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "638c0604-6c05-409f-a464-530535cb9f3bd", "eventTime": "2017-05-26T18:30:40Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2c562b0-9a6f-4a0f-8139-f617306a0054a", "record_id": "flaws_cloudtrail:0000132:b2c562b0-9a6f-4a0f-8139-f617306a0054a", "row_index": 132, "timestamp": "2017-05-26T18:30:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": null, "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2c562b0-9a6f-4a0f-8139-f617306a0054a", "eventTime": "2017-05-26T18:30:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14f0aa91-510a-4ed0-8220-07267dd3c45", "record_id": "flaws_cloudtrail:0000133:14f0aa91-510a-4ed0-8220-07267dd3c45", "row_index": 133, "timestamp": "2017-05-26T18:30:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": null, "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 948, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14f0aa91-510a-4ed0-8220-07267dd3c45", "eventTime": "2017-05-26T18:30:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5631bea-da30-46ae-80ca-488325479b72", "record_id": "flaws_cloudtrail:0000134:f5631bea-da30-46ae-80ca-488325479b72", "row_index": 134, "timestamp": "2017-05-26T18:30:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": null, "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5631bea-da30-46ae-80ca-488325479b72", "eventTime": "2017-05-26T18:30:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "[aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3]", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d27b1526-f765-414c-aecd-b99a6cd89c1e", "record_id": "flaws_cloudtrail:0000135:d27b1526-f765-414c-aecd-b99a6cd89c1e", "row_index": 135, "timestamp": "2017-05-26T18:30:41Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "account_id": "811596193553", "principal_id": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "user_name": null, "access_key_id": "ASIA8P08BBSRL7ELO67L", "session_issuer_arn": "arn:aws:iam::811596193553:role/Cloudsploit", "session_issuer_user_name": "Cloudsploit"}, "network": {"source_ip": "252.138.62.6", "user_agent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d27b1526-f765-414c-aecd-b99a6cd89c1e", "eventTime": "2017-05-26T18:30:41Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.138.62.6", "userAgent": "aws-sdk-nodejs/2.7.21 linux/v4.3.2 exec-env/AWS_Lambda_nodejs4.3", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROANYWQUYSW31GGK0R08:cloudsploit_scan", "arn": "arn:aws:sts::811596193553:assumed-role/Cloudsploit/cloudsploit_scan", "accountId": "811596193553", "accessKeyId": "ASIA8P08BBSRL7ELO67L", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T18:30:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROANYWQUYSW31GGK0R08", "arn": "arn:aws:iam::811596193553:role/Cloudsploit", "accountId": "811596193553", "userName": "Cloudsploit"}}}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5377d09-b36c-47d4-a1e2-ebc5fac4ac7d", "record_id": "flaws_cloudtrail:0000136:d5377d09-b36c-47d4-a1e2-ebc5fac4ac7d", "row_index": 136, "timestamp": "2017-05-26T18:39:37Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "36.132.1.43", "user_agent": "[aws-cli/1.11.89 Python/2.7.9 Windows/7 botocore/1.5.52]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 636, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5377d09-b36c-47d4-a1e2-ebc5fac4ac7d", "eventTime": "2017-05-26T18:39:37Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "36.132.1.43", "userAgent": "[aws-cli/1.11.89 Python/2.7.9 Windows/7 botocore/1.5.52]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55b8c005-f6cc-4353-a820-3a0c1e9276d6", "record_id": "flaws_cloudtrail:0000137:55b8c005-f6cc-4353-a820-3a0c1e9276d6", "row_index": 137, "timestamp": "2017-05-26T18:45:16Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.255.91.167", "user_agent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55b8c005-f6cc-4353-a820-3a0c1e9276d6", "eventTime": "2017-05-26T18:45:16Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.255.91.167", "userAgent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f06101-f7cf-435d-bbde-6e6376a2f09f", "record_id": "flaws_cloudtrail:0000138:f06101-f7cf-435d-bbde-6e6376a2f09f", "row_index": 138, "timestamp": "2017-05-26T18:45:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.255.91.167", "user_agent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f06101-f7cf-435d-bbde-6e6376a2f09f", "eventTime": "2017-05-26T18:45:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.255.91.167", "userAgent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce4a86b9-d6c5-4570-b774-076480b597a", "record_id": "flaws_cloudtrail:0000139:ce4a86b9-d6c5-4570-b774-076480b597a", "row_index": 139, "timestamp": "2017-05-26T18:49:32Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.251.84.1", "user_agent": "aws-cli/1.11.93 Python/2.7.13 Darwin/15.6.0 botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce4a86b9-d6c5-4570-b774-076480b597a", "eventTime": "2017-05-26T18:49:32Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.251.84.1", "userAgent": "aws-cli/1.11.93 Python/2.7.13 Darwin/15.6.0 botocore/1.5.56", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be895f26-116c-43f7-83eb-f8e2e803e112", "record_id": "flaws_cloudtrail:0000140:be895f26-116c-43f7-83eb-f8e2e803e112", "row_index": 140, "timestamp": "2017-05-26T18:49:56Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.251.84.1", "user_agent": "aws-cli/1.11.93 Python/2.7.13 Darwin/15.6.0 botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be895f26-116c-43f7-83eb-f8e2e803e112", "eventTime": "2017-05-26T18:49:56Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.251.84.1", "userAgent": "aws-cli/1.11.93 Python/2.7.13 Darwin/15.6.0 botocore/1.5.56", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid REST API identifier specified", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "*", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90c0ac4d-f972-4dc5-8515-0505bac241dc", "record_id": "flaws_cloudtrail:0000141:90c0ac4d-f972-4dc5-8515-0505bac241dc", "row_index": 141, "timestamp": "2017-05-26T18:50:03Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.251.84.1", "user_agent": "aws-cli/1.11.93 Python/2.7.13 Darwin/15.6.0 botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90c0ac4d-f972-4dc5-8515-0505bac241dc", "eventTime": "2017-05-26T18:50:03Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.251.84.1", "userAgent": "aws-cli/1.11.93 Python/2.7.13 Darwin/15.6.0 botocore/1.5.56", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid REST API identifier specified", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "level6", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53d034c2-25e6-4333-ad2e-9e37cf8631ee", "record_id": "flaws_cloudtrail:0000142:53d034c2-25e6-4333-ad2e-9e37cf8631ee", "row_index": 142, "timestamp": "2017-05-26T18:50:07Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.251.84.1", "user_agent": "aws-cli/1.11.93 Python/2.7.13 Darwin/15.6.0 botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53d034c2-25e6-4333-ad2e-9e37cf8631ee", "eventTime": "2017-05-26T18:50:07Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.251.84.1", "userAgent": "aws-cli/1.11.93 Python/2.7.13 Darwin/15.6.0 botocore/1.5.56", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid REST API identifier specified", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "foo", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "871ab676-bb20-4817-89b4-e6c996fac0b1", "record_id": "flaws_cloudtrail:0000143:871ab676-bb20-4817-89b4-e6c996fac0b1", "row_index": 143, "timestamp": "2017-05-26T18:51:07Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.251.84.1", "user_agent": "aws-cli/1.11.93 Python/2.7.13 Darwin/15.6.0 botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "871ab676-bb20-4817-89b4-e6c996fac0b1", "eventTime": "2017-05-26T18:51:07Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.251.84.1", "userAgent": "aws-cli/1.11.93 Python/2.7.13 Darwin/15.6.0 botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6a171e4-a040-4824-a4d8-e8441a7841f3", "record_id": "flaws_cloudtrail:0000144:e6a171e4-a040-4824-a4d8-e8441a7841f3", "row_index": 144, "timestamp": "2017-05-26T18:51:30Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.251.84.1", "user_agent": "aws-cli/1.11.93 Python/2.7.13 Darwin/15.6.0 botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6a171e4-a040-4824-a4d8-e8441a7841f3", "eventTime": "2017-05-26T18:51:30Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.251.84.1", "userAgent": "aws-cli/1.11.93 Python/2.7.13 Darwin/15.6.0 botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32bf9ca8-d504-44e3-b055-7e676f4c493b", "record_id": "flaws_cloudtrail:0000145:32bf9ca8-d504-44e3-b055-7e676f4c493b", "row_index": 145, "timestamp": "2017-05-26T18:52:02Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.251.84.1", "user_agent": "aws-cli/1.11.93 Python/2.7.13 Darwin/15.6.0 botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32bf9ca8-d504-44e3-b055-7e676f4c493b", "eventTime": "2017-05-26T18:52:02Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.251.84.1", "userAgent": "aws-cli/1.11.93 Python/2.7.13 Darwin/15.6.0 botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a556ec25-da57-4c29-a5cd-0a244916eb1d", "record_id": "flaws_cloudtrail:0000146:a556ec25-da57-4c29-a5cd-0a244916eb1d", "row_index": 146, "timestamp": "2017-05-26T18:52:18Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.251.84.1", "user_agent": "aws-cli/1.11.93 Python/2.7.13 Darwin/15.6.0 botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a556ec25-da57-4c29-a5cd-0a244916eb1d", "eventTime": "2017-05-26T18:52:18Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.251.84.1", "userAgent": "aws-cli/1.11.93 Python/2.7.13 Darwin/15.6.0 botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf0f8d60-9e77-4eb9-9870-6faa36fc4061", "record_id": "flaws_cloudtrail:0000147:cf0f8d60-9e77-4eb9-9870-6faa36fc4061", "row_index": 147, "timestamp": "2017-05-26T18:59:20Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1478, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf0f8d60-9e77-4eb9-9870-6faa36fc4061", "eventTime": "2017-05-26T18:59:20Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5MI6KUG7KI8QASJ9", "expiration": "May 27, 2017 1:13:57 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f81d27c5-0f8d-42c1-a1a6-6c300ca1b862", "record_id": "flaws_cloudtrail:0000148:f81d27c5-0f8d-42c1-a1a6-6c300ca1b862", "row_index": 148, "timestamp": "2017-05-26T19:08:49Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "187.96.211.3", "user_agent": "aws-cli/1.11.87 Python/2.7.13 Linux/4.9.0-kali4-amd64 botocore/1.5.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f81d27c5-0f8d-42c1-a1a6-6c300ca1b862", "eventTime": "2017-05-26T19:08:49Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "187.96.211.3", "userAgent": "aws-cli/1.11.87 Python/2.7.13 Linux/4.9.0-kali4-amd64 botocore/1.5.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "822f4a2a-6eb9-4703-83ea-bbc449c87ad1", "record_id": "flaws_cloudtrail:0000149:822f4a2a-6eb9-4703-83ea-bbc449c87ad1", "row_index": 149, "timestamp": "2017-05-26T19:09:34Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "187.96.211.3", "user_agent": "aws-cli/1.11.87 Python/2.7.13 Linux/4.9.0-kali4-amd64 botocore/1.5.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "822f4a2a-6eb9-4703-83ea-bbc449c87ad1", "eventTime": "2017-05-26T19:09:34Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "187.96.211.3", "userAgent": "aws-cli/1.11.87 Python/2.7.13 Linux/4.9.0-kali4-amd64 botocore/1.5.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b07c5ed-3b19-497c-99a6-ba8305a747d8", "record_id": "flaws_cloudtrail:0000150:3b07c5ed-3b19-497c-99a6-ba8305a747d8", "row_index": 150, "timestamp": "2017-05-26T19:10:31Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "187.96.211.3", "user_agent": "aws-cli/1.11.87 Python/2.7.13 Linux/4.9.0-kali4-amd64 botocore/1.5.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b07c5ed-3b19-497c-99a6-ba8305a747d8", "eventTime": "2017-05-26T19:10:31Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "187.96.211.3", "userAgent": "aws-cli/1.11.87 Python/2.7.13 Linux/4.9.0-kali4-amd64 botocore/1.5.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80b3527e-e6f6-4b6b-b6a3-5eb2fff1cbad", "record_id": "flaws_cloudtrail:0000151:80b3527e-e6f6-4b6b-b6a3-5eb2fff1cbad", "row_index": 151, "timestamp": "2017-05-26T19:10:32Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1478, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80b3527e-e6f6-4b6b-b6a3-5eb2fff1cbad", "eventTime": "2017-05-26T19:10:32Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7MLDNJUA0BTQQCLO", "expiration": "May 27, 2017 1:39:52 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6638e38-51ea-45f9-a1e2-81844bbec9fa", "record_id": "flaws_cloudtrail:0000152:b6638e38-51ea-45f9-a1e2-81844bbec9fa", "row_index": 152, "timestamp": "2017-05-26T19:17:38Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "187.96.211.3", "user_agent": "aws-cli/1.11.87 Python/2.7.13 Linux/4.9.0-kali4-amd64 botocore/1.5.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6638e38-51ea-45f9-a1e2-81844bbec9fa", "eventTime": "2017-05-26T19:17:38Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "187.96.211.3", "userAgent": "aws-cli/1.11.87 Python/2.7.13 Linux/4.9.0-kali4-amd64 botocore/1.5.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3cd650c-709c-4ffb-b09f-abe0951773c8", "record_id": "flaws_cloudtrail:0000153:c3cd650c-709c-4ffb-b09f-abe0951773c8", "row_index": 153, "timestamp": "2017-05-26T19:18:37Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "187.96.211.3", "user_agent": "aws-cli/1.11.87 Python/2.7.13 Linux/4.9.0-kali4-amd64 botocore/1.5.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3cd650c-709c-4ffb-b09f-abe0951773c8", "eventTime": "2017-05-26T19:18:37Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "187.96.211.3", "userAgent": "aws-cli/1.11.87 Python/2.7.13 Linux/4.9.0-kali4-amd64 botocore/1.5.50", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc5c17de-89a2-459c-a1b6-2206fe53a195", "record_id": "flaws_cloudtrail:0000154:dc5c17de-89a2-459c-a1b6-2206fe53a195", "row_index": 154, "timestamp": "2017-05-26T19:23:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "187.96.211.3", "user_agent": "aws-cli/1.11.87 Python/2.7.13 Linux/4.9.0-kali4-amd64 botocore/1.5.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc5c17de-89a2-459c-a1b6-2206fe53a195", "eventTime": "2017-05-26T19:23:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "187.96.211.3", "userAgent": "aws-cli/1.11.87 Python/2.7.13 Linux/4.9.0-kali4-amd64 botocore/1.5.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3639c9cc-d3d6-4d79-86d3-ae565fab2fb0", "record_id": "flaws_cloudtrail:0000155:3639c9cc-d3d6-4d79-86d3-ae565fab2fb0", "row_index": 155, "timestamp": "2017-05-26T19:24:16Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "187.96.211.3", "user_agent": "aws-cli/1.11.87 Python/2.7.13 Linux/4.9.0-kali4-amd64 botocore/1.5.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3639c9cc-d3d6-4d79-86d3-ae565fab2fb0", "eventTime": "2017-05-26T19:24:16Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "187.96.211.3", "userAgent": "aws-cli/1.11.87 Python/2.7.13 Linux/4.9.0-kali4-amd64 botocore/1.5.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ea58c6a-1a2c-45c4-950b-8030d473b4a0", "record_id": "flaws_cloudtrail:0000156:1ea58c6a-1a2c-45c4-950b-8030d473b4a0", "row_index": 156, "timestamp": "2017-05-26T19:25:01Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "187.96.211.3", "user_agent": "aws-cli/1.11.87 Python/2.7.13 Linux/4.9.0-kali4-amd64 botocore/1.5.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ea58c6a-1a2c-45c4-950b-8030d473b4a0", "eventTime": "2017-05-26T19:25:01Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "187.96.211.3", "userAgent": "aws-cli/1.11.87 Python/2.7.13 Linux/4.9.0-kali4-amd64 botocore/1.5.50", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aa9a046-f9b7-471a-8c29-e18cc51d4565", "record_id": "flaws_cloudtrail:0000157:9aa9a046-f9b7-471a-8c29-e18cc51d4565", "row_index": 157, "timestamp": "2017-05-26T19:46:57Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAO8MA6UJF8K96KCZD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aa9a046-f9b7-471a-8c29-e18cc51d4565", "eventTime": "2017-05-26T19:46:57Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAO8MA6UJF8K96KCZD", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-05-26T16:12:49Z"}}}, "requestParameters": {"roleName": "Cloudsploit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1681e7a5-b71e-4672-bd00-ed665ddbe98f", "record_id": "flaws_cloudtrail:0000158:1681e7a5-b71e-4672-bd00-ed665ddbe98f", "row_index": 158, "timestamp": "2017-05-26T19:46:57Z", "event_type": "DeleteRole", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAO8MA6UJF8K96KCZD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1681e7a5-b71e-4672-bd00-ed665ddbe98f", "eventTime": "2017-05-26T19:46:57Z", "eventName": "DeleteRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAO8MA6UJF8K96KCZD", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-05-26T16:12:49Z"}}}, "requestParameters": {"roleName": "Cloudsploit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00ec728d-7214-45d3-9ed1-79a1b9f5cbff", "record_id": "flaws_cloudtrail:0000159:00ec728d-7214-45d3-9ed1-79a1b9f5cbff", "row_index": 159, "timestamp": "2017-05-26T19:46:57Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAO8MA6UJF8K96KCZD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00ec728d-7214-45d3-9ed1-79a1b9f5cbff", "eventTime": "2017-05-26T19:46:57Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAO8MA6UJF8K96KCZD", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-05-26T16:12:49Z"}}}, "requestParameters": {"maxItems": 1000}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f85286-7160-4056-9bd7-81759de5647", "record_id": "flaws_cloudtrail:0000160:f85286-7160-4056-9bd7-81759de5647", "row_index": 160, "timestamp": "2017-05-26T19:46:57Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAO8MA6UJF8K96KCZD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f85286-7160-4056-9bd7-81759de5647", "eventTime": "2017-05-26T19:46:57Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAO8MA6UJF8K96KCZD", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-05-26T16:12:49Z"}}}, "requestParameters": {"roleName": "Cloudsploit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51f8f781-07b8-4308-8e3e-f262599cbd91", "record_id": "flaws_cloudtrail:0000161:51f8f781-07b8-4308-8e3e-f262599cbd91", "row_index": 161, "timestamp": "2017-05-26T19:46:57Z", "event_type": "DetachRolePolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAO8MA6UJF8K96KCZD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51f8f781-07b8-4308-8e3e-f262599cbd91", "eventTime": "2017-05-26T19:46:57Z", "eventName": "DetachRolePolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAO8MA6UJF8K96KCZD", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-05-26T16:12:49Z"}}}, "requestParameters": {"roleName": "Cloudsploit", "policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b43a16d-f2c1-4da0-8a0f-4149eb28208e", "record_id": "flaws_cloudtrail:0000162:4b43a16d-f2c1-4da0-8a0f-4149eb28208e", "row_index": 162, "timestamp": "2017-05-26T19:46:57Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAO8MA6UJF8K96KCZD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b43a16d-f2c1-4da0-8a0f-4149eb28208e", "eventTime": "2017-05-26T19:46:57Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAO8MA6UJF8K96KCZD", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-05-26T16:12:49Z"}}}, "requestParameters": {"roleName": "Cloudsploit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c758e514-5323-42d5-8f8b-3345b74b9ab0", "record_id": "flaws_cloudtrail:0000163:c758e514-5323-42d5-8f8b-3345b74b9ab0", "row_index": 163, "timestamp": "2017-05-26T19:59:20Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1478, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c758e514-5323-42d5-8f8b-3345b74b9ab0", "eventTime": "2017-05-26T19:59:20Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOAE681ABZK87KBUC", "expiration": "May 27, 2017 2:35:19 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27a3a1a8-76ed-45f8-a0c9-4e4d8be1c3ae", "record_id": "flaws_cloudtrail:0000164:27a3a1a8-76ed-45f8-a0c9-4e4d8be1c3ae", "row_index": 164, "timestamp": "2017-05-26T20:02:42Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4, aws-internal/3]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 637, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27a3a1a8-76ed-45f8-a0c9-4e4d8be1c3ae", "eventTime": "2017-05-26T20:02:42Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4, aws-internal/3]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-05-26T16:12:49Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3bc77a5-5d39-4233-a937-ce6e79ced79f", "record_id": "flaws_cloudtrail:0000165:d3bc77a5-5d39-4233-a937-ce6e79ced79f", "row_index": 165, "timestamp": "2017-05-26T20:02:42Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4, aws-internal/3]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 637, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3bc77a5-5d39-4233-a937-ce6e79ced79f", "eventTime": "2017-05-26T20:02:42Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4, aws-internal/3]", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-05-26T16:12:49Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e351324eb-b2cc-43a5-9e1e-3f39daaae762", "record_id": "flaws_cloudtrail:0000166:e351324eb-b2cc-43a5-9e1e-3f39daaae762", "row_index": 166, "timestamp": "2017-05-26T20:40:56Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e351324eb-b2cc-43a5-9e1e-3f39daaae762", "eventTime": "2017-05-26T20:40:56Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25e3d165-74e1-4c78-917e-f92044895e23", "record_id": "flaws_cloudtrail:0000167:25e3d165-74e1-4c78-917e-f92044895e23", "row_index": 167, "timestamp": "2017-05-26T20:40:56Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25e3d165-74e1-4c78-917e-f92044895e23", "eventTime": "2017-05-26T20:40:56Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6f19a8f-170e-419e-84b5-5cb263b30d09", "record_id": "flaws_cloudtrail:0000168:f6f19a8f-170e-419e-84b5-5cb263b30d09", "row_index": 168, "timestamp": "2017-05-26T20:40:57Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6f19a8f-170e-419e-84b5-5cb263b30d09", "eventTime": "2017-05-26T20:40:57Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb0be81e-19a6-47e0-8ca1-733b4ebe9312", "record_id": "flaws_cloudtrail:0000169:fb0be81e-19a6-47e0-8ca1-733b4ebe9312", "row_index": 169, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb0be81e-19a6-47e0-8ca1-733b4ebe9312", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6f97112-96ac-44f1-86c2-1406c68139", "record_id": "flaws_cloudtrail:0000170:d6f97112-96ac-44f1-86c2-1406c68139", "row_index": 170, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6f97112-96ac-44f1-86c2-1406c68139", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c79fa42-7b13-4f0a-ba9a-23e081d80135", "record_id": "flaws_cloudtrail:0000171:2c79fa42-7b13-4f0a-ba9a-23e081d80135", "row_index": 171, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c79fa42-7b13-4f0a-ba9a-23e081d80135", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6dd1d8d4-78a1-45b1-9e68-51d72a1f97b7", "record_id": "flaws_cloudtrail:0000172:6dd1d8d4-78a1-45b1-9e68-51d72a1f97b7", "row_index": 172, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6dd1d8d4-78a1-45b1-9e68-51d72a1f97b7", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"tagging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f5f812d-1917-453b-9e57-04ecf15ad8e7", "record_id": "flaws_cloudtrail:0000173:5f5f812d-1917-453b-9e57-04ecf15ad8e7", "row_index": 173, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f5f812d-1917-453b-9e57-04ecf15ad8e7", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"tagging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "193dd97a-5401-4a5b-b981-3299d55484", "record_id": "flaws_cloudtrail:0000174:193dd97a-5401-4a5b-b981-3299d55484", "row_index": 174, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "193dd97a-5401-4a5b-b981-3299d55484", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"tagging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5173acff-cb8e-42de-9b3e-8182cbad5ff7", "record_id": "flaws_cloudtrail:0000175:5173acff-cb8e-42de-9b3e-8182cbad5ff7", "row_index": 175, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5173acff-cb8e-42de-9b3e-8182cbad5ff7", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86e358e2-84ac-42f5-8929-6c497eb29f99", "record_id": "flaws_cloudtrail:0000176:86e358e2-84ac-42f5-8929-6c497eb29f99", "row_index": 176, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86e358e2-84ac-42f5-8929-6c497eb29f99", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcf5719d-8404-4120-b069-1eeab69b17ac", "record_id": "flaws_cloudtrail:0000177:fcf5719d-8404-4120-b069-1eeab69b17ac", "row_index": 177, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcf5719d-8404-4120-b069-1eeab69b17ac", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "544203-60f1-43ca-8a11-79da8554d221", "record_id": "flaws_cloudtrail:0000178:544203-60f1-43ca-8a11-79da8554d221", "row_index": 178, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "544203-60f1-43ca-8a11-79da8554d221", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "966fa4f8-5b30-419b-b1c6-172fe53513f", "record_id": "flaws_cloudtrail:0000179:966fa4f8-5b30-419b-b1c6-172fe53513f", "row_index": 179, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "966fa4f8-5b30-419b-b1c6-172fe53513f", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a11832a-7aaa-41cc-9c6c-8f0f10cca806", "record_id": "flaws_cloudtrail:0000180:a11832a-7aaa-41cc-9c6c-8f0f10cca806", "row_index": 180, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a11832a-7aaa-41cc-9c6c-8f0f10cca806", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b191394-d671-4be8-99f5-29d046ed841a", "record_id": "flaws_cloudtrail:0000181:b191394-d671-4be8-99f5-29d046ed841a", "row_index": 181, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b191394-d671-4be8-99f5-29d046ed841a", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "875111b22-dfa8-4805-b956-36335b1357", "record_id": "flaws_cloudtrail:0000182:875111b22-dfa8-4805-b956-36335b1357", "row_index": 182, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "875111b22-dfa8-4805-b956-36335b1357", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "295586f2-b7ec-4d03-ba21-f9e1f282c859", "record_id": "flaws_cloudtrail:0000183:295586f2-b7ec-4d03-ba21-f9e1f282c859", "row_index": 183, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "295586f2-b7ec-4d03-ba21-f9e1f282c859", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74c253a6-bdfd-43c2-809b-0e16d936e72b", "record_id": "flaws_cloudtrail:0000184:74c253a6-bdfd-43c2-809b-0e16d936e72b", "row_index": 184, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74c253a6-bdfd-43c2-809b-0e16d936e72b", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"tagging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acace628-d109-4432-b1e3-710d3f4e8572", "record_id": "flaws_cloudtrail:0000185:acace628-d109-4432-b1e3-710d3f4e8572", "row_index": 185, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acace628-d109-4432-b1e3-710d3f4e8572", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87a9f4c3-d2d3-4886-b56a-7c174ae91157", "record_id": "flaws_cloudtrail:0000186:87a9f4c3-d2d3-4886-b56a-7c174ae91157", "row_index": 186, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87a9f4c3-d2d3-4886-b56a-7c174ae91157", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7049e59c-8791-46e9-9f11-1625e4e8af77", "record_id": "flaws_cloudtrail:0000187:7049e59c-8791-46e9-9f11-1625e4e8af77", "row_index": 187, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7049e59c-8791-46e9-9f11-1625e4e8af77", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e75efee-beef-4331-894f-f6ddb3747227", "record_id": "flaws_cloudtrail:0000188:2e75efee-beef-4331-894f-f6ddb3747227", "row_index": 188, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e75efee-beef-4331-894f-f6ddb3747227", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"tagging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f8e2184-1c4c-424f-a47f-7a0cc0f4ef9c", "record_id": "flaws_cloudtrail:0000189:3f8e2184-1c4c-424f-a47f-7a0cc0f4ef9c", "row_index": 189, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f8e2184-1c4c-424f-a47f-7a0cc0f4ef9c", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91a3b2af-f1e9-4893-80e5-da74dc790df7", "record_id": "flaws_cloudtrail:0000190:91a3b2af-f1e9-4893-80e5-da74dc790df7", "row_index": 190, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91a3b2af-f1e9-4893-80e5-da74dc790df7", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"tagging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bf4d6a2-c85d-4937-aa33-a8115f4776d8", "record_id": "flaws_cloudtrail:0000191:9bf4d6a2-c85d-4937-aa33-a8115f4776d8", "row_index": 191, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bf4d6a2-c85d-4937-aa33-a8115f4776d8", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87ea3b19-f9f4-4b0f-a067-1af6d154307", "record_id": "flaws_cloudtrail:0000192:87ea3b19-f9f4-4b0f-a067-1af6d154307", "row_index": 192, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87ea3b19-f9f4-4b0f-a067-1af6d154307", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fdf011a-520b-4017-b22b-1368ffb01712", "record_id": "flaws_cloudtrail:0000193:3fdf011a-520b-4017-b22b-1368ffb01712", "row_index": 193, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fdf011a-520b-4017-b22b-1368ffb01712", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27b995046-f7bf-429d-a7ad-c739b4090af3", "record_id": "flaws_cloudtrail:0000194:27b995046-f7bf-429d-a7ad-c739b4090af3", "row_index": 194, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27b995046-f7bf-429d-a7ad-c739b4090af3", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"tagging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3732db2e-b388-4d1c-8bf6-92f659442b", "record_id": "flaws_cloudtrail:0000195:3732db2e-b388-4d1c-8bf6-92f659442b", "row_index": 195, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3732db2e-b388-4d1c-8bf6-92f659442b", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42b67b18-c0c6-4179-addb-a689af5c513a", "record_id": "flaws_cloudtrail:0000196:42b67b18-c0c6-4179-addb-a689af5c513a", "row_index": 196, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42b67b18-c0c6-4179-addb-a689af5c513a", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4a669bc-8dbd-4712-84f5-04b41c28a37b", "record_id": "flaws_cloudtrail:0000197:d4a669bc-8dbd-4712-84f5-04b41c28a37b", "row_index": 197, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4a669bc-8dbd-4712-84f5-04b41c28a37b", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb16802f-40a7-499b-98c2-3f9ae84f615f", "record_id": "flaws_cloudtrail:0000198:eb16802f-40a7-499b-98c2-3f9ae84f615f", "row_index": 198, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb16802f-40a7-499b-98c2-3f9ae84f615f", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9e1b028-f05e-40cb-8f6f-7fb740e6ec5e", "record_id": "flaws_cloudtrail:0000199:f9e1b028-f05e-40cb-8f6f-7fb740e6ec5e", "row_index": 199, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9e1b028-f05e-40cb-8f6f-7fb740e6ec5e", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e463ee9-9e06-41d1-98e5-404511b82a2cd", "record_id": "flaws_cloudtrail:0000200:4e463ee9-9e06-41d1-98e5-404511b82a2cd", "row_index": 200, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e463ee9-9e06-41d1-98e5-404511b82a2cd", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1262a8e-d5b8-4891-9599-b66638de0f49", "record_id": "flaws_cloudtrail:0000201:c1262a8e-d5b8-4891-9599-b66638de0f49", "row_index": 201, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1262a8e-d5b8-4891-9599-b66638de0f49", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"tagging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6ba23cb-8f1b-4fa0-a891-cde7dfc85ea4", "record_id": "flaws_cloudtrail:0000202:f6ba23cb-8f1b-4fa0-a891-cde7dfc85ea4", "row_index": 202, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6ba23cb-8f1b-4fa0-a891-cde7dfc85ea4", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53a2a956-9652-42b3-af61-d50e52a1ef8a", "record_id": "flaws_cloudtrail:0000203:53a2a956-9652-42b3-af61-d50e52a1ef8a", "row_index": 203, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53a2a956-9652-42b3-af61-d50e52a1ef8a", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04e9bff5-b237-4255-8abe-73eb9fda19a4", "record_id": "flaws_cloudtrail:0000204:04e9bff5-b237-4255-8abe-73eb9fda19a4", "row_index": 204, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04e9bff5-b237-4255-8abe-73eb9fda19a4", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7f24e84-21e1-4754-b1bb-5a96e5facff3", "record_id": "flaws_cloudtrail:0000205:d7f24e84-21e1-4754-b1bb-5a96e5facff3", "row_index": 205, "timestamp": "2017-05-26T20:40:58Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7f24e84-21e1-4754-b1bb-5a96e5facff3", "eventTime": "2017-05-26T20:40:58Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2143eb40-83d2-4b31-8a7b-73c5995e8015", "record_id": "flaws_cloudtrail:0000206:2143eb40-83d2-4b31-8a7b-73c5995e8015", "row_index": 206, "timestamp": "2017-05-26T20:40:59Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2143eb40-83d2-4b31-8a7b-73c5995e8015", "eventTime": "2017-05-26T20:40:59Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a5671e3-cf80-4b02-a493-4e986e617db4", "record_id": "flaws_cloudtrail:0000207:7a5671e3-cf80-4b02-a493-4e986e617db4", "row_index": 207, "timestamp": "2017-05-26T20:40:59Z", "event_type": "GetBucketTagging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a5671e3-cf80-4b02-a493-4e986e617db4", "eventTime": "2017-05-26T20:40:59Z", "eventName": "GetBucketTagging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "NoSuchTagSet", "errorMessage": "The TagSet does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"tagging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21e3e159-b19c-4ce5-aa8e-64b53c876b4d", "record_id": "flaws_cloudtrail:0000208:21e3e159-b19c-4ce5-aa8e-64b53c876b4d", "row_index": 208, "timestamp": "2017-05-26T20:40:59Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21e3e159-b19c-4ce5-aa8e-64b53c876b4d", "eventTime": "2017-05-26T20:40:59Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ecde29f-70ba-43bd-8903-89a22a81b17e", "record_id": "flaws_cloudtrail:0000209:9ecde29f-70ba-43bd-8903-89a22a81b17e", "row_index": 209, "timestamp": "2017-05-26T20:40:59Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ecde29f-70ba-43bd-8903-89a22a81b17e", "eventTime": "2017-05-26T20:40:59Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98a36a7f-b700-4a1b-bef8-7b2f1dcec2d9", "record_id": "flaws_cloudtrail:0000210:98a36a7f-b700-4a1b-bef8-7b2f1dcec2d9", "row_index": 210, "timestamp": "2017-05-26T20:40:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98a36a7f-b700-4a1b-bef8-7b2f1dcec2d9", "eventTime": "2017-05-26T20:40:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d04a528-7830-49b7-9fb1-f37950dc", "record_id": "flaws_cloudtrail:0000211:5d04a528-7830-49b7-9fb1-f37950dc", "row_index": 211, "timestamp": "2017-05-26T20:41:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d04a528-7830-49b7-9fb1-f37950dc", "eventTime": "2017-05-26T20:41:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b665839-6c2f-486d-87e2-51b50acb2ffc", "record_id": "flaws_cloudtrail:0000212:b665839-6c2f-486d-87e2-51b50acb2ffc", "row_index": 212, "timestamp": "2017-05-26T20:41:00Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b665839-6c2f-486d-87e2-51b50acb2ffc", "eventTime": "2017-05-26T20:41:00Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b74b37db-2331-41fc-be14-85e43fc208cc", "record_id": "flaws_cloudtrail:0000213:b74b37db-2331-41fc-be14-85e43fc208cc", "row_index": 213, "timestamp": "2017-05-26T20:41:00Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b74b37db-2331-41fc-be14-85e43fc208cc", "eventTime": "2017-05-26T20:41:00Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"replication": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3da5ee41-c2c5-4e7c-9986-56d05bf09f8c", "record_id": "flaws_cloudtrail:0000214:3da5ee41-c2c5-4e7c-9986-56d05bf09f8c", "row_index": 214, "timestamp": "2017-05-26T20:41:01Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3da5ee41-c2c5-4e7c-9986-56d05bf09f8c", "eventTime": "2017-05-26T20:41:01Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "CloudCustodian/167.6.140.11 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {"items": [{"volumeId": "vol-8e100f305b7a6fef3"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "676017-a814-47bc-966f-515a00c01111", "record_id": "flaws_cloudtrail:0000215:676017-a814-47bc-966f-515a00c01111", "row_index": 215, "timestamp": "2017-05-26T20:59:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1474, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "676017-a814-47bc-966f-515a00c01111", "eventTime": "2017-05-26T20:59:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIARUIGFEHGRQOCKB2S", "expiration": "May 27, 2017 3:29:17 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d850639-4003-41a7-9b0f-c0796e3d58a4", "record_id": "flaws_cloudtrail:0000216:d850639-4003-41a7-9b0f-c0796e3d58a4", "row_index": 216, "timestamp": "2017-05-26T21:11:13Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 662, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d850639-4003-41a7-9b0f-c0796e3d58a4", "eventTime": "2017-05-26T21:11:13Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "264eb764-5938-4a81-b7ef-05ec775ec0d1", "record_id": "flaws_cloudtrail:0000217:264eb764-5938-4a81-b7ef-05ec775ec0d1", "row_index": 217, "timestamp": "2017-05-26T21:11:13Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "264eb764-5938-4a81-b7ef-05ec775ec0d1", "eventTime": "2017-05-26T21:11:13Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6db774d8-ff48-471e-9a1f-962bf1269504", "record_id": "flaws_cloudtrail:0000218:6db774d8-ff48-471e-9a1f-962bf1269504", "row_index": 218, "timestamp": "2017-05-26T21:11:13Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6db774d8-ff48-471e-9a1f-962bf1269504", "eventTime": "2017-05-26T21:11:13Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a6104d6-48bc-44a6-b73f-949fcf4d9530", "record_id": "flaws_cloudtrail:0000219:7a6104d6-48bc-44a6-b73f-949fcf4d9530", "row_index": 219, "timestamp": "2017-05-26T21:11:13Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a6104d6-48bc-44a6-b73f-949fcf4d9530", "eventTime": "2017-05-26T21:11:13Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d1245d5-ee73-4dfd-9b3a-1993c98dfec4", "record_id": "flaws_cloudtrail:0000220:7d1245d5-ee73-4dfd-9b3a-1993c98dfec4", "row_index": 220, "timestamp": "2017-05-26T21:11:13Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d1245d5-ee73-4dfd-9b3a-1993c98dfec4", "eventTime": "2017-05-26T21:11:13Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b570a95-9f19-41f4-b51d-79e3dfb2ba82", "record_id": "flaws_cloudtrail:0000221:4b570a95-9f19-41f4-b51d-79e3dfb2ba82", "row_index": 221, "timestamp": "2017-05-26T21:11:13Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b570a95-9f19-41f4-b51d-79e3dfb2ba82", "eventTime": "2017-05-26T21:11:13Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf019bf2-4f5c-4bfe-8ff9-440dbd67b498", "record_id": "flaws_cloudtrail:0000222:bf019bf2-4f5c-4bfe-8ff9-440dbd67b498", "row_index": 222, "timestamp": "2017-05-26T21:11:13Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf019bf2-4f5c-4bfe-8ff9-440dbd67b498", "eventTime": "2017-05-26T21:11:13Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f100fc73-1e41-473f-897c-8d6e9f7f2e4f", "record_id": "flaws_cloudtrail:0000223:f100fc73-1e41-473f-897c-8d6e9f7f2e4f", "row_index": 223, "timestamp": "2017-05-26T21:11:13Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f100fc73-1e41-473f-897c-8d6e9f7f2e4f", "eventTime": "2017-05-26T21:11:13Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6be3c622-e0a8-4a0e-9e98-74fa5a30b904", "record_id": "flaws_cloudtrail:0000224:6be3c622-e0a8-4a0e-9e98-74fa5a30b904", "row_index": 224, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6be3c622-e0a8-4a0e-9e98-74fa5a30b904", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a142507-277f-4a8c-8922-8eb618279", "record_id": "flaws_cloudtrail:0000225:0a142507-277f-4a8c-8922-8eb618279", "row_index": 225, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a142507-277f-4a8c-8922-8eb618279", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad1b8d42-4517-4663-b08f-821c816ff54b", "record_id": "flaws_cloudtrail:0000226:ad1b8d42-4517-4663-b08f-821c816ff54b", "row_index": 226, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad1b8d42-4517-4663-b08f-821c816ff54b", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c16fe9c-8150-4498-8da1-1fc4cf570569", "record_id": "flaws_cloudtrail:0000227:1c16fe9c-8150-4498-8da1-1fc4cf570569", "row_index": 227, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c16fe9c-8150-4498-8da1-1fc4cf570569", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed09e792-8ae9-4e72-85fc-dac30f7aff06", "record_id": "flaws_cloudtrail:0000228:ed09e792-8ae9-4e72-85fc-dac30f7aff06", "row_index": 228, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed09e792-8ae9-4e72-85fc-dac30f7aff06", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f31389b-a30d-4fd8-a35c-ef7c1942f517", "record_id": "flaws_cloudtrail:0000229:8f31389b-a30d-4fd8-a35c-ef7c1942f517", "row_index": 229, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f31389b-a30d-4fd8-a35c-ef7c1942f517", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d8f6b8b-fcb8-4512-a237-cb414754ab14b", "record_id": "flaws_cloudtrail:0000230:6d8f6b8b-fcb8-4512-a237-cb414754ab14b", "row_index": 230, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d8f6b8b-fcb8-4512-a237-cb414754ab14b", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9db59bdb-02d2-43c2-9288-f283be349cdd", "record_id": "flaws_cloudtrail:0000231:9db59bdb-02d2-43c2-9288-f283be349cdd", "row_index": 231, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9db59bdb-02d2-43c2-9288-f283be349cdd", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6ddef02-0dbc-4108-b669-eb113d2607e0", "record_id": "flaws_cloudtrail:0000232:b6ddef02-0dbc-4108-b669-eb113d2607e0", "row_index": 232, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6ddef02-0dbc-4108-b669-eb113d2607e0", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ecea9c4-5fc3-44c1-9613-86b0f6d5c379", "record_id": "flaws_cloudtrail:0000233:8ecea9c4-5fc3-44c1-9613-86b0f6d5c379", "row_index": 233, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ecea9c4-5fc3-44c1-9613-86b0f6d5c379", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1da728c6-b9d0-4f5d-aa0b-5af2585a273b", "record_id": "flaws_cloudtrail:0000234:1da728c6-b9d0-4f5d-aa0b-5af2585a273b", "row_index": 234, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1da728c6-b9d0-4f5d-aa0b-5af2585a273b", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c598db0-04d7-4a9f-bc73-346b80102d", "record_id": "flaws_cloudtrail:0000235:2c598db0-04d7-4a9f-bc73-346b80102d", "row_index": 235, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c598db0-04d7-4a9f-bc73-346b80102d", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "689c4a2c-30db-4a13-9b09-c417a9abd8bf", "record_id": "flaws_cloudtrail:0000236:689c4a2c-30db-4a13-9b09-c417a9abd8bf", "row_index": 236, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "689c4a2c-30db-4a13-9b09-c417a9abd8bf", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eff08c5-2337-4c98-9e90-aa07fbfdcdb1", "record_id": "flaws_cloudtrail:0000237:6eff08c5-2337-4c98-9e90-aa07fbfdcdb1", "row_index": 237, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eff08c5-2337-4c98-9e90-aa07fbfdcdb1", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9e6e071-b237-45bf-b3a8-ce234737b7674", "record_id": "flaws_cloudtrail:0000238:c9e6e071-b237-45bf-b3a8-ce234737b7674", "row_index": 238, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9e6e071-b237-45bf-b3a8-ce234737b7674", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56347f65-358f-455e-9eac-cd67a79e9392", "record_id": "flaws_cloudtrail:0000239:56347f65-358f-455e-9eac-cd67a79e9392", "row_index": 239, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56347f65-358f-455e-9eac-cd67a79e9392", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a447b234-d31a-4e6e-986b-f7866ce22d4d", "record_id": "flaws_cloudtrail:0000240:a447b234-d31a-4e6e-986b-f7866ce22d4d", "row_index": 240, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a447b234-d31a-4e6e-986b-f7866ce22d4d", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad0ffe7a-dc00-43de-ab00-2142c5f1f6c2", "record_id": "flaws_cloudtrail:0000241:ad0ffe7a-dc00-43de-ab00-2142c5f1f6c2", "row_index": 241, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad0ffe7a-dc00-43de-ab00-2142c5f1f6c2", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcb97f44-c52d-49a2-a3e8-88e8d20581", "record_id": "flaws_cloudtrail:0000242:dcb97f44-c52d-49a2-a3e8-88e8d20581", "row_index": 242, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcb97f44-c52d-49a2-a3e8-88e8d20581", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52f804ba-1adf-4b98-9833-6e24a2279abf", "record_id": "flaws_cloudtrail:0000243:52f804ba-1adf-4b98-9833-6e24a2279abf", "row_index": 243, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52f804ba-1adf-4b98-9833-6e24a2279abf", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efc2acef-f167-4c1a-b4c2-d5a0b4455b6a", "record_id": "flaws_cloudtrail:0000244:efc2acef-f167-4c1a-b4c2-d5a0b4455b6a", "row_index": 244, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efc2acef-f167-4c1a-b4c2-d5a0b4455b6a", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3db4be44-78f7-4f30-8a71-94dc16f9b3dd", "record_id": "flaws_cloudtrail:0000245:3db4be44-78f7-4f30-8a71-94dc16f9b3dd", "row_index": 245, "timestamp": "2017-05-26T21:11:14Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3db4be44-78f7-4f30-8a71-94dc16f9b3dd", "eventTime": "2017-05-26T21:11:14Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c7bd9c2-2ff0-41c7-8d4e-95d50e200fea", "record_id": "flaws_cloudtrail:0000246:2c7bd9c2-2ff0-41c7-8d4e-95d50e200fea", "row_index": 246, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c7bd9c2-2ff0-41c7-8d4e-95d50e200fea", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34877-b325-45c0-beb3-02ce1709cbcb", "record_id": "flaws_cloudtrail:0000247:34877-b325-45c0-beb3-02ce1709cbcb", "row_index": 247, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34877-b325-45c0-beb3-02ce1709cbcb", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "755f70f5-3921-469c-b1b7-7c4a8bae96f1", "record_id": "flaws_cloudtrail:0000248:755f70f5-3921-469c-b1b7-7c4a8bae96f1", "row_index": 248, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "755f70f5-3921-469c-b1b7-7c4a8bae96f1", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0394a1e0-814c-43a3-9122-086575af21d74", "record_id": "flaws_cloudtrail:0000249:0394a1e0-814c-43a3-9122-086575af21d74", "row_index": 249, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0394a1e0-814c-43a3-9122-086575af21d74", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "123119da-e6ba-4ccc-bab1-709f5467d0e8", "record_id": "flaws_cloudtrail:0000250:123119da-e6ba-4ccc-bab1-709f5467d0e8", "row_index": 250, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "123119da-e6ba-4ccc-bab1-709f5467d0e8", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ac2abec-7392-4eac-bf70-52d046620fd27", "record_id": "flaws_cloudtrail:0000251:4ac2abec-7392-4eac-bf70-52d046620fd27", "row_index": 251, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ac2abec-7392-4eac-bf70-52d046620fd27", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "314d71c2-e3cc-4be4-b94e-20a7d8f3f021", "record_id": "flaws_cloudtrail:0000252:314d71c2-e3cc-4be4-b94e-20a7d8f3f021", "row_index": 252, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAYGODTI8QW9WAZ43R", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "314d71c2-e3cc-4be4-b94e-20a7d8f3f021", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAYGODTI8QW9WAZ43R", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T21:11:15Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9395d746-208d-4f9d-b96a-0b3e3166d818", "record_id": "flaws_cloudtrail:0000253:9395d746-208d-4f9d-b96a-0b3e3166d818", "row_index": 253, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9395d746-208d-4f9d-b96a-0b3e3166d818", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "075cec8a-93b9-4f7b-82d2-10fbb593102e6", "record_id": "flaws_cloudtrail:0000254:075cec8a-93b9-4f7b-82d2-10fbb593102e6", "row_index": 254, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "075cec8a-93b9-4f7b-82d2-10fbb593102e6", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8aea545f-717b-4b7a-b9e9-f65432cbe576", "record_id": "flaws_cloudtrail:0000255:8aea545f-717b-4b7a-b9e9-f65432cbe576", "row_index": 255, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8aea545f-717b-4b7a-b9e9-f65432cbe576", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44fbe15e-3003-46e0-9858-3d7fdf8a9230", "record_id": "flaws_cloudtrail:0000256:44fbe15e-3003-46e0-9858-3d7fdf8a9230", "row_index": 256, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44fbe15e-3003-46e0-9858-3d7fdf8a9230", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a85ad44c-7922-439f-8ed1-20f8f00e75de", "record_id": "flaws_cloudtrail:0000257:a85ad44c-7922-439f-8ed1-20f8f00e75de", "row_index": 257, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a85ad44c-7922-439f-8ed1-20f8f00e75de", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffbff988-634e-415f-a43d-7966e9f9aa44", "record_id": "flaws_cloudtrail:0000258:ffbff988-634e-415f-a43d-7966e9f9aa44", "row_index": 258, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffbff988-634e-415f-a43d-7966e9f9aa44", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b1cfc50-fe39-4f33-ba9e-072315d092ff", "record_id": "flaws_cloudtrail:0000259:9b1cfc50-fe39-4f33-ba9e-072315d092ff", "row_index": 259, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b1cfc50-fe39-4f33-ba9e-072315d092ff", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0a2e93d-62d7-44b8-a7ff-f7cee7ca9308", "record_id": "flaws_cloudtrail:0000260:c0a2e93d-62d7-44b8-a7ff-f7cee7ca9308", "row_index": 260, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAH9C5ZEGJ8B31VX2B", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0a2e93d-62d7-44b8-a7ff-f7cee7ca9308", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAH9C5ZEGJ8B31VX2B", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T21:11:15Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ad3c433-c296-485e-8f39-2da54c28decd", "record_id": "flaws_cloudtrail:0000261:5ad3c433-c296-485e-8f39-2da54c28decd", "row_index": 261, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ad3c433-c296-485e-8f39-2da54c28decd", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ff0f551-4edd-4412-9909-c9066c9f63fb", "record_id": "flaws_cloudtrail:0000262:4ff0f551-4edd-4412-9909-c9066c9f63fb", "row_index": 262, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ff0f551-4edd-4412-9909-c9066c9f63fb", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "618f35e7-572f-4ce0-89f1-52fb8c696975a", "record_id": "flaws_cloudtrail:0000263:618f35e7-572f-4ce0-89f1-52fb8c696975a", "row_index": 263, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "618f35e7-572f-4ce0-89f1-52fb8c696975a", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26ba57a3-4ab6-4406-8633-cecefd7de4dc", "record_id": "flaws_cloudtrail:0000264:26ba57a3-4ab6-4406-8633-cecefd7de4dc", "row_index": 264, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26ba57a3-4ab6-4406-8633-cecefd7de4dc", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69f4ee57-133d-4741-a5a7-f6ca3be1a1c6", "record_id": "flaws_cloudtrail:0000265:69f4ee57-133d-4741-a5a7-f6ca3be1a1c6", "row_index": 265, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAYBJ0ZPDV6OEWOQ6M", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69f4ee57-133d-4741-a5a7-f6ca3be1a1c6", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAYBJ0ZPDV6OEWOQ6M", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T21:11:15Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "446b091b-4861-4129-bc2a-02eb5b7766d0", "record_id": "flaws_cloudtrail:0000266:446b091b-4861-4129-bc2a-02eb5b7766d0", "row_index": 266, "timestamp": "2017-05-26T21:11:15Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "446b091b-4861-4129-bc2a-02eb5b7766d0", "eventTime": "2017-05-26T21:11:15Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "248c3339-be9f-494f-a5f7-63fb381e38eb", "record_id": "flaws_cloudtrail:0000267:248c3339-be9f-494f-a5f7-63fb381e38eb", "row_index": 267, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "248c3339-be9f-494f-a5f7-63fb381e38eb", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a14d69ad-2c6d-4804-b90a-23bc0098cac9", "record_id": "flaws_cloudtrail:0000268:a14d69ad-2c6d-4804-b90a-23bc0098cac9", "row_index": 268, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a14d69ad-2c6d-4804-b90a-23bc0098cac9", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b415048d-8ac4-4673-a4c9-a59f0a3509ad", "record_id": "flaws_cloudtrail:0000269:7b415048d-8ac4-4673-a4c9-a59f0a3509ad", "row_index": 269, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b415048d-8ac4-4673-a4c9-a59f0a3509ad", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa04c2f3-d8ba-48e5-8d87-27cdf50e8ef2", "record_id": "flaws_cloudtrail:0000270:aa04c2f3-d8ba-48e5-8d87-27cdf50e8ef2", "row_index": 270, "timestamp": "2017-05-26T21:11:15Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 646, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa04c2f3-d8ba-48e5-8d87-27cdf50e8ef2", "eventTime": "2017-05-26T21:11:15Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26eb9926-0f05-4db9-8f31-98d601c7b840", "record_id": "flaws_cloudtrail:0000271:26eb9926-0f05-4db9-8f31-98d601c7b840", "row_index": 271, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26eb9926-0f05-4db9-8f31-98d601c7b840", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adeba5c8-f367-43bf-8fa6-dd2911edb08b", "record_id": "flaws_cloudtrail:0000272:adeba5c8-f367-43bf-8fa6-dd2911edb08b", "row_index": 272, "timestamp": "2017-05-26T21:11:15Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adeba5c8-f367-43bf-8fa6-dd2911edb08b", "eventTime": "2017-05-26T21:11:15Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e00e95de-1c45-45c1-b393-928ff03affce", "record_id": "flaws_cloudtrail:0000273:e00e95de-1c45-45c1-b393-928ff03affce", "row_index": 273, "timestamp": "2017-05-26T21:11:15Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e00e95de-1c45-45c1-b393-928ff03affce", "eventTime": "2017-05-26T21:11:15Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2da05d2c-8253-4c01-9f6a-b9e68205e286", "record_id": "flaws_cloudtrail:0000274:2da05d2c-8253-4c01-9f6a-b9e68205e286", "row_index": 274, "timestamp": "2017-05-26T21:11:15Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 647, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2da05d2c-8253-4c01-9f6a-b9e68205e286", "eventTime": "2017-05-26T21:11:15Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edf0396e-5651-4642-a4f2-fffc6109ba8c", "record_id": "flaws_cloudtrail:0000275:edf0396e-5651-4642-a4f2-fffc6109ba8c", "row_index": 275, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edf0396e-5651-4642-a4f2-fffc6109ba8c", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "247493fae-3385-4abe-92ba-11eadfb57f49", "record_id": "flaws_cloudtrail:0000276:247493fae-3385-4abe-92ba-11eadfb57f49", "row_index": 276, "timestamp": "2017-05-26T21:11:15Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 662, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "247493fae-3385-4abe-92ba-11eadfb57f49", "eventTime": "2017-05-26T21:11:15Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e81d206e-7909-483c-8609-96ebc04ca3d8", "record_id": "flaws_cloudtrail:0000277:e81d206e-7909-483c-8609-96ebc04ca3d8", "row_index": 277, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAMYM0GZQWCIF0JZYW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e81d206e-7909-483c-8609-96ebc04ca3d8", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAMYM0GZQWCIF0JZYW", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T21:11:15Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09c19688-7d88-4d7a-9a5f-c890bb407306", "record_id": "flaws_cloudtrail:0000278:09c19688-7d88-4d7a-9a5f-c890bb407306", "row_index": 278, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09c19688-7d88-4d7a-9a5f-c890bb407306", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a4e48df-44d5-431a-950e-4608100dce9a", "record_id": "flaws_cloudtrail:0000279:6a4e48df-44d5-431a-950e-4608100dce9a", "row_index": 279, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a4e48df-44d5-431a-950e-4608100dce9a", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "727db6be-f506-4416-840f-cbbec47a8e9e", "record_id": "flaws_cloudtrail:0000280:727db6be-f506-4416-840f-cbbec47a8e9e", "row_index": 280, "timestamp": "2017-05-26T21:11:15Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "727db6be-f506-4416-840f-cbbec47a8e9e", "eventTime": "2017-05-26T21:11:15Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "890574cc1-3446-4434-b244-c764558f6c272", "record_id": "flaws_cloudtrail:0000281:890574cc1-3446-4434-b244-c764558f6c272", "row_index": 281, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "890574cc1-3446-4434-b244-c764558f6c272", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52f707bb-a976-4dfa-a351-a16c1585e7e4", "record_id": "flaws_cloudtrail:0000282:52f707bb-a976-4dfa-a351-a16c1585e7e4", "row_index": 282, "timestamp": "2017-05-26T21:11:15Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52f707bb-a976-4dfa-a351-a16c1585e7e4", "eventTime": "2017-05-26T21:11:15Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51ca43e6-1047-481f-bcb2-fa3bc75e8c51", "record_id": "flaws_cloudtrail:0000283:51ca43e6-1047-481f-bcb2-fa3bc75e8c51", "row_index": 283, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51ca43e6-1047-481f-bcb2-fa3bc75e8c51", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "829e576d-f43c-42e2-a858-95cf5b161a15", "record_id": "flaws_cloudtrail:0000284:829e576d-f43c-42e2-a858-95cf5b161a15", "row_index": 284, "timestamp": "2017-05-26T21:11:15Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "829e576d-f43c-42e2-a858-95cf5b161a15", "eventTime": "2017-05-26T21:11:15Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "565a7ee6-0500-497e-9c8b-cba525d90402", "record_id": "flaws_cloudtrail:0000285:565a7ee6-0500-497e-9c8b-cba525d90402", "row_index": 285, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "565a7ee6-0500-497e-9c8b-cba525d90402", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a97cb9d9-6b76-42ca-b766-6d849e5e024d", "record_id": "flaws_cloudtrail:0000286:a97cb9d9-6b76-42ca-b766-6d849e5e024d", "row_index": 286, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAX9JPWJ9SUV31NQOX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a97cb9d9-6b76-42ca-b766-6d849e5e024d", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAX9JPWJ9SUV31NQOX", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T21:11:15Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e636d30-5163-4b98-8d8f-4c2d144b079d", "record_id": "flaws_cloudtrail:0000287:9e636d30-5163-4b98-8d8f-4c2d144b079d", "row_index": 287, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e636d30-5163-4b98-8d8f-4c2d144b079d", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5979f80-3d85-46e2-86a6-8ddcd130e65e", "record_id": "flaws_cloudtrail:0000288:d5979f80-3d85-46e2-86a6-8ddcd130e65e", "row_index": 288, "timestamp": "2017-05-26T21:11:15Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5979f80-3d85-46e2-86a6-8ddcd130e65e", "eventTime": "2017-05-26T21:11:15Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45c57cea-e2a2-49e5-9826-c9f291360c840", "record_id": "flaws_cloudtrail:0000289:45c57cea-e2a2-49e5-9826-c9f291360c840", "row_index": 289, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45c57cea-e2a2-49e5-9826-c9f291360c840", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5193d79b-a6f1-4080-8562-740e6662e95e", "record_id": "flaws_cloudtrail:0000290:5193d79b-a6f1-4080-8562-740e6662e95e", "row_index": 290, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5193d79b-a6f1-4080-8562-740e6662e95e", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eaaa867-37e8-45fd-9531-0a4f0d74ca1d", "record_id": "flaws_cloudtrail:0000291:6eaaa867-37e8-45fd-9531-0a4f0d74ca1d", "row_index": 291, "timestamp": "2017-05-26T21:11:15Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eaaa867-37e8-45fd-9531-0a4f0d74ca1d", "eventTime": "2017-05-26T21:11:15Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77284be9-1b7d-4382-a3d9-871df786a45d", "record_id": "flaws_cloudtrail:0000292:77284be9-1b7d-4382-a3d9-871df786a45d", "row_index": 292, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77284be9-1b7d-4382-a3d9-871df786a45d", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e04188-757d-4eb6-a27d-d06f756a05d3", "record_id": "flaws_cloudtrail:0000293:e04188-757d-4eb6-a27d-d06f756a05d3", "row_index": 293, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e04188-757d-4eb6-a27d-d06f756a05d3", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a76714-dcdf-4eed-b6b3-b7bcf10a8073", "record_id": "flaws_cloudtrail:0000294:a76714-dcdf-4eed-b6b3-b7bcf10a8073", "row_index": 294, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a76714-dcdf-4eed-b6b3-b7bcf10a8073", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d80662b9-9914-405e-8c30-9a90188cc", "record_id": "flaws_cloudtrail:0000295:d80662b9-9914-405e-8c30-9a90188cc", "row_index": 295, "timestamp": "2017-05-26T21:11:15Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d80662b9-9914-405e-8c30-9a90188cc", "eventTime": "2017-05-26T21:11:15Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eee1907c-5798-4548-81a9-768aadef809b", "record_id": "flaws_cloudtrail:0000296:eee1907c-5798-4548-81a9-768aadef809b", "row_index": 296, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eee1907c-5798-4548-81a9-768aadef809b", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "680809b-380d-4fdc-96c0-56f98e00124", "record_id": "flaws_cloudtrail:0000297:680809b-380d-4fdc-96c0-56f98e00124", "row_index": 297, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIALGMNSTZID4IU312A", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "680809b-380d-4fdc-96c0-56f98e00124", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIALGMNSTZID4IU312A", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T21:11:15Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e4b246e-1b0f-4795-8ff3-3d428762e19", "record_id": "flaws_cloudtrail:0000298:3e4b246e-1b0f-4795-8ff3-3d428762e19", "row_index": 298, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e4b246e-1b0f-4795-8ff3-3d428762e19", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1546b3a0-6622-448a-aadb-6185fa1b968a", "record_id": "flaws_cloudtrail:0000299:1546b3a0-6622-448a-aadb-6185fa1b968a", "row_index": 299, "timestamp": "2017-05-26T21:11:15Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1546b3a0-6622-448a-aadb-6185fa1b968a", "eventTime": "2017-05-26T21:11:15Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2570c5b3-d53f-4bbe-b5c4-0abed54c2a9f", "record_id": "flaws_cloudtrail:0000300:2570c5b3-d53f-4bbe-b5c4-0abed54c2a9f", "row_index": 300, "timestamp": "2017-05-26T21:11:16Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2570c5b3-d53f-4bbe-b5c4-0abed54c2a9f", "eventTime": "2017-05-26T21:11:16Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e881657-17d8-4b91-9d43-4a7afea7e441", "record_id": "flaws_cloudtrail:0000301:1e881657-17d8-4b91-9d43-4a7afea7e441", "row_index": 301, "timestamp": "2017-05-26T21:11:16Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 661, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e881657-17d8-4b91-9d43-4a7afea7e441", "eventTime": "2017-05-26T21:11:16Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ab377f7-6884-4c79-984c-2977cae54585", "record_id": "flaws_cloudtrail:0000302:9ab377f7-6884-4c79-984c-2977cae54585", "row_index": 302, "timestamp": "2017-05-26T21:11:16Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ab377f7-6884-4c79-984c-2977cae54585", "eventTime": "2017-05-26T21:11:16Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6910a526-b3e2-4141-b522-480a301b380f", "record_id": "flaws_cloudtrail:0000303:6910a526-b3e2-4141-b522-480a301b380f", "row_index": 303, "timestamp": "2017-05-26T21:11:16Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 661, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6910a526-b3e2-4141-b522-480a301b380f", "eventTime": "2017-05-26T21:11:16Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eff3f181-b81d-439e-b226-d476ef45f416", "record_id": "flaws_cloudtrail:0000304:eff3f181-b81d-439e-b226-d476ef45f416", "row_index": 304, "timestamp": "2017-05-26T21:11:16Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eff3f181-b81d-439e-b226-d476ef45f416", "eventTime": "2017-05-26T21:11:16Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a09a8ff-9b6f-4cb1-a588-77fb0e8d0454", "record_id": "flaws_cloudtrail:0000305:8a09a8ff-9b6f-4cb1-a588-77fb0e8d0454", "row_index": 305, "timestamp": "2017-05-26T21:11:16Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a09a8ff-9b6f-4cb1-a588-77fb0e8d0454", "eventTime": "2017-05-26T21:11:16Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3692b4da-4e7d-47bf-ab86-670868df18c0e", "record_id": "flaws_cloudtrail:0000306:3692b4da-4e7d-47bf-ab86-670868df18c0e", "row_index": 306, "timestamp": "2017-05-26T21:11:16Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3692b4da-4e7d-47bf-ab86-670868df18c0e", "eventTime": "2017-05-26T21:11:16Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90c9578a-f8d4-4eee-bf6c-ab10ee217284", "record_id": "flaws_cloudtrail:0000307:90c9578a-f8d4-4eee-bf6c-ab10ee217284", "row_index": 307, "timestamp": "2017-05-26T21:11:16Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90c9578a-f8d4-4eee-bf6c-ab10ee217284", "eventTime": "2017-05-26T21:11:16Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "465c0248-6efb-4327-bbbf-163edcba3ca0", "record_id": "flaws_cloudtrail:0000308:465c0248-6efb-4327-bbbf-163edcba3ca0", "row_index": 308, "timestamp": "2017-05-26T21:11:16Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "465c0248-6efb-4327-bbbf-163edcba3ca0", "eventTime": "2017-05-26T21:11:16Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8db1dd5-e7d5-422d-acd6-2520debddcc1", "record_id": "flaws_cloudtrail:0000309:e8db1dd5-e7d5-422d-acd6-2520debddcc1", "row_index": 309, "timestamp": "2017-05-26T21:11:16Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8db1dd5-e7d5-422d-acd6-2520debddcc1", "eventTime": "2017-05-26T21:11:16Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f752293-c9b1-47d0-ac54-8a00e601a502", "record_id": "flaws_cloudtrail:0000310:f752293-c9b1-47d0-ac54-8a00e601a502", "row_index": 310, "timestamp": "2017-05-26T21:11:16Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f752293-c9b1-47d0-ac54-8a00e601a502", "eventTime": "2017-05-26T21:11:16Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e30ff56e-b072-495b-b4d3-fcc6803dc5b5", "record_id": "flaws_cloudtrail:0000311:e30ff56e-b072-495b-b4d3-fcc6803dc5b5", "row_index": 311, "timestamp": "2017-05-26T21:11:16Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e30ff56e-b072-495b-b4d3-fcc6803dc5b5", "eventTime": "2017-05-26T21:11:16Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15dc8f21-900f-4dc5-9f7a-52f4d76e19d6", "record_id": "flaws_cloudtrail:0000312:15dc8f21-900f-4dc5-9f7a-52f4d76e19d6", "row_index": 312, "timestamp": "2017-05-26T21:11:16Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15dc8f21-900f-4dc5-9f7a-52f4d76e19d6", "eventTime": "2017-05-26T21:11:16Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c111d097-1ad5-441c-aa4f-f09a195cd2b9", "record_id": "flaws_cloudtrail:0000313:c111d097-1ad5-441c-aa4f-f09a195cd2b9", "row_index": 313, "timestamp": "2017-05-26T21:11:16Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c111d097-1ad5-441c-aa4f-f09a195cd2b9", "eventTime": "2017-05-26T21:11:16Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62bfa95a-9d3d-48a8-8eaf-4bb06942554f", "record_id": "flaws_cloudtrail:0000314:62bfa95a-9d3d-48a8-8eaf-4bb06942554f", "row_index": 314, "timestamp": "2017-05-26T21:11:16Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62bfa95a-9d3d-48a8-8eaf-4bb06942554f", "eventTime": "2017-05-26T21:11:16Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e11de401-a4fd-47ea-be7d-8722a1906fe4", "record_id": "flaws_cloudtrail:0000315:e11de401-a4fd-47ea-be7d-8722a1906fe4", "row_index": 315, "timestamp": "2017-05-26T21:11:16Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e11de401-a4fd-47ea-be7d-8722a1906fe4", "eventTime": "2017-05-26T21:11:16Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9846bd6-9462-4c42-a359-5463f250c179", "record_id": "flaws_cloudtrail:0000316:b9846bd6-9462-4c42-a359-5463f250c179", "row_index": 316, "timestamp": "2017-05-26T21:11:16Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 653, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9846bd6-9462-4c42-a359-5463f250c179", "eventTime": "2017-05-26T21:11:16Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e50ff3db-3706-42e1-8e1b-5619d7f36ba6", "record_id": "flaws_cloudtrail:0000317:e50ff3db-3706-42e1-8e1b-5619d7f36ba6", "row_index": 317, "timestamp": "2017-05-26T21:11:16Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e50ff3db-3706-42e1-8e1b-5619d7f36ba6", "eventTime": "2017-05-26T21:11:16Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca80bd9d-678f-40f6-ae8b-08a5d2e88e25", "record_id": "flaws_cloudtrail:0000318:ca80bd9d-678f-40f6-ae8b-08a5d2e88e25", "row_index": 318, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca80bd9d-678f-40f6-ae8b-08a5d2e88e25", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebfbb6e8-4af1-4523-8613-2939bb73ad32", "record_id": "flaws_cloudtrail:0000319:ebfbb6e8-4af1-4523-8613-2939bb73ad32", "row_index": 319, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebfbb6e8-4af1-4523-8613-2939bb73ad32", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f8728d1-9d89-479e-be37-959758d3f42e", "record_id": "flaws_cloudtrail:0000320:7f8728d1-9d89-479e-be37-959758d3f42e", "row_index": 320, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f8728d1-9d89-479e-be37-959758d3f42e", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e1264ab-9995-4a64-9ff9-c2083b0769c2", "record_id": "flaws_cloudtrail:0000321:4e1264ab-9995-4a64-9ff9-c2083b0769c2", "row_index": 321, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e1264ab-9995-4a64-9ff9-c2083b0769c2", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73a8f5a3-cce1-4b96-a7cb-6735bcc0fde7", "record_id": "flaws_cloudtrail:0000322:73a8f5a3-cce1-4b96-a7cb-6735bcc0fde7", "row_index": 322, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73a8f5a3-cce1-4b96-a7cb-6735bcc0fde7", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a0a53fb-fea1-4c87-aded-7ea3535e4dbc", "record_id": "flaws_cloudtrail:0000323:1a0a53fb-fea1-4c87-aded-7ea3535e4dbc", "row_index": 323, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a0a53fb-fea1-4c87-aded-7ea3535e4dbc", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d79a3526-189a-46bc-abbf-91c6bb1fc5f3", "record_id": "flaws_cloudtrail:0000324:d79a3526-189a-46bc-abbf-91c6bb1fc5f3", "row_index": 324, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d79a3526-189a-46bc-abbf-91c6bb1fc5f3", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb7f1e71-5824-4807-8fea-a63403993aed", "record_id": "flaws_cloudtrail:0000325:fb7f1e71-5824-4807-8fea-a63403993aed", "row_index": 325, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb7f1e71-5824-4807-8fea-a63403993aed", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "072783dd9-e30f-44b3-ac6b-1b8eb8abb174", "record_id": "flaws_cloudtrail:0000326:072783dd9-e30f-44b3-ac6b-1b8eb8abb174", "row_index": 326, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 662, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "072783dd9-e30f-44b3-ac6b-1b8eb8abb174", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e1a56e0-931e-4eb1-9ec0-f6f23f38f5c8", "record_id": "flaws_cloudtrail:0000327:5e1a56e0-931e-4eb1-9ec0-f6f23f38f5c8", "row_index": 327, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e1a56e0-931e-4eb1-9ec0-f6f23f38f5c8", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e7a9b60-0432-48c9-b0dd-a0cca6494e67", "record_id": "flaws_cloudtrail:0000328:5e7a9b60-0432-48c9-b0dd-a0cca6494e67", "row_index": 328, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e7a9b60-0432-48c9-b0dd-a0cca6494e67", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "556d363f-73a3-4042-b7ee-32d7f1f43c53", "record_id": "flaws_cloudtrail:0000329:556d363f-73a3-4042-b7ee-32d7f1f43c53", "row_index": 329, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "556d363f-73a3-4042-b7ee-32d7f1f43c53", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "562c4c07-e924-4c8c-81fc-685448790f52", "record_id": "flaws_cloudtrail:0000330:562c4c07-e924-4c8c-81fc-685448790f52", "row_index": 330, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "562c4c07-e924-4c8c-81fc-685448790f52", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed6a62e4-fa86-4495-8ce0-568a4a1e69ab", "record_id": "flaws_cloudtrail:0000331:ed6a62e4-fa86-4495-8ce0-568a4a1e69ab", "row_index": 331, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed6a62e4-fa86-4495-8ce0-568a4a1e69ab", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2fa5105-92f8-4e49-bb26-dc6127d43a2f", "record_id": "flaws_cloudtrail:0000332:b2fa5105-92f8-4e49-bb26-dc6127d43a2f", "row_index": 332, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2fa5105-92f8-4e49-bb26-dc6127d43a2f", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9911ef83-357a-45c7-99e9-7db9b9b9a4d4", "record_id": "flaws_cloudtrail:0000333:9911ef83-357a-45c7-99e9-7db9b9b9a4d4", "row_index": 333, "timestamp": "2017-05-26T21:11:17Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9911ef83-357a-45c7-99e9-7db9b9b9a4d4", "eventTime": "2017-05-26T21:11:17Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29bec7d3-0ba5-4976-8f1d-b8238acc93dd", "record_id": "flaws_cloudtrail:0000334:29bec7d3-0ba5-4976-8f1d-b8238acc93dd", "row_index": 334, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29bec7d3-0ba5-4976-8f1d-b8238acc93dd", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58057d5f-3987-45b2-8548-8caeeec666977", "record_id": "flaws_cloudtrail:0000335:58057d5f-3987-45b2-8548-8caeeec666977", "row_index": 335, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58057d5f-3987-45b2-8548-8caeeec666977", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d1f26fd-cc88-4a93-a334-f59eeb757350", "record_id": "flaws_cloudtrail:0000336:4d1f26fd-cc88-4a93-a334-f59eeb757350", "row_index": 336, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d1f26fd-cc88-4a93-a334-f59eeb757350", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec9df425-0890-49ff-ac75-d467c30aa596", "record_id": "flaws_cloudtrail:0000337:ec9df425-0890-49ff-ac75-d467c30aa596", "row_index": 337, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec9df425-0890-49ff-ac75-d467c30aa596", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abcce63e-d468-496d-8b29-f4c97e249f15", "record_id": "flaws_cloudtrail:0000338:abcce63e-d468-496d-8b29-f4c97e249f15", "row_index": 338, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abcce63e-d468-496d-8b29-f4c97e249f15", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cc619a8-5aa1-4066-9eaf-afdd7d36d27c", "record_id": "flaws_cloudtrail:0000339:7cc619a8-5aa1-4066-9eaf-afdd7d36d27c", "row_index": 339, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cc619a8-5aa1-4066-9eaf-afdd7d36d27c", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22cbbf54-95ac-498a-a2c3-2d2a7de2d13c", "record_id": "flaws_cloudtrail:0000340:22cbbf54-95ac-498a-a2c3-2d2a7de2d13c", "row_index": 340, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22cbbf54-95ac-498a-a2c3-2d2a7de2d13c", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ef3b098-9a33-4892-9e85-69db9b0cb08b", "record_id": "flaws_cloudtrail:0000341:7ef3b098-9a33-4892-9e85-69db9b0cb08b", "row_index": 341, "timestamp": "2017-05-26T21:11:17Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ef3b098-9a33-4892-9e85-69db9b0cb08b", "eventTime": "2017-05-26T21:11:17Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56bacaa1-68c1-4f0f-a65a-f03067e0d8d2", "record_id": "flaws_cloudtrail:0000342:56bacaa1-68c1-4f0f-a65a-f03067e0d8d2", "row_index": 342, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56bacaa1-68c1-4f0f-a65a-f03067e0d8d2", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b2f97c4-4059-4591-9dcf-b7e511759cd8", "record_id": "flaws_cloudtrail:0000343:9b2f97c4-4059-4591-9dcf-b7e511759cd8", "row_index": 343, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b2f97c4-4059-4591-9dcf-b7e511759cd8", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f960fdf-06d8-413d-83d9-00f5fe230431", "record_id": "flaws_cloudtrail:0000344:5f960fdf-06d8-413d-83d9-00f5fe230431", "row_index": 344, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f960fdf-06d8-413d-83d9-00f5fe230431", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d5bf5b6-7848-435a-b5ff-9f22c2c35414", "record_id": "flaws_cloudtrail:0000345:1d5bf5b6-7848-435a-b5ff-9f22c2c35414", "row_index": 345, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d5bf5b6-7848-435a-b5ff-9f22c2c35414", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25fb36f5-cabc-4e8c-aacb-68c19cae1470", "record_id": "flaws_cloudtrail:0000346:25fb36f5-cabc-4e8c-aacb-68c19cae1470", "row_index": 346, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25fb36f5-cabc-4e8c-aacb-68c19cae1470", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c040d225-9fcd-4d3c-bf22-1cc051269a", "record_id": "flaws_cloudtrail:0000347:c040d225-9fcd-4d3c-bf22-1cc051269a", "row_index": 347, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c040d225-9fcd-4d3c-bf22-1cc051269a", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38d82b30-0a08-482b-8411-e225097a7b4", "record_id": "flaws_cloudtrail:0000348:38d82b30-0a08-482b-8411-e225097a7b4", "row_index": 348, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38d82b30-0a08-482b-8411-e225097a7b4", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdeaea78-fc00-402c-a93a-0230a2eb3301", "record_id": "flaws_cloudtrail:0000349:fdeaea78-fc00-402c-a93a-0230a2eb3301", "row_index": 349, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAJQP0ZCJRMSVEBVMY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdeaea78-fc00-402c-a93a-0230a2eb3301", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAJQP0ZCJRMSVEBVMY", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T21:11:18Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90bc189f-fd73-4238-869c-694b11964108", "record_id": "flaws_cloudtrail:0000350:90bc189f-fd73-4238-869c-694b11964108", "row_index": 350, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90bc189f-fd73-4238-869c-694b11964108", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f228001-865f-441e-ad5c-27857dd933c2", "record_id": "flaws_cloudtrail:0000351:f228001-865f-441e-ad5c-27857dd933c2", "row_index": 351, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f228001-865f-441e-ad5c-27857dd933c2", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e7e59f7-aadd-41f2-8832-5fe8b7b195ce", "record_id": "flaws_cloudtrail:0000352:0e7e59f7-aadd-41f2-8832-5fe8b7b195ce", "row_index": 352, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e7e59f7-aadd-41f2-8832-5fe8b7b195ce", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9bc8b0b-68b8-43f8-be1e-40c684e4ee3c", "record_id": "flaws_cloudtrail:0000353:a9bc8b0b-68b8-43f8-be1e-40c684e4ee3c", "row_index": 353, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9bc8b0b-68b8-43f8-be1e-40c684e4ee3c", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b641ef6-05bb-4779-8b7e-f79fc96edc75", "record_id": "flaws_cloudtrail:0000354:1b641ef6-05bb-4779-8b7e-f79fc96edc75", "row_index": 354, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b641ef6-05bb-4779-8b7e-f79fc96edc75", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a19d1b5-a3a0-4400-b79c-1347684afb11", "record_id": "flaws_cloudtrail:0000355:4a19d1b5-a3a0-4400-b79c-1347684afb11", "row_index": 355, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a19d1b5-a3a0-4400-b79c-1347684afb11", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af38fd52-c8e6-45f6-aa07-9f966b834d95", "record_id": "flaws_cloudtrail:0000356:af38fd52-c8e6-45f6-aa07-9f966b834d95", "row_index": 356, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAEGFV2PJ8ZFJD1KDL", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af38fd52-c8e6-45f6-aa07-9f966b834d95", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAEGFV2PJ8ZFJD1KDL", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T21:11:18Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c9140da-f855-428e-b788-a2221d7b4cee", "record_id": "flaws_cloudtrail:0000357:2c9140da-f855-428e-b788-a2221d7b4cee", "row_index": 357, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c9140da-f855-428e-b788-a2221d7b4cee", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39b6d7f3-583a-4953-808f-4b7ee89ec595", "record_id": "flaws_cloudtrail:0000358:39b6d7f3-583a-4953-808f-4b7ee89ec595", "row_index": 358, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39b6d7f3-583a-4953-808f-4b7ee89ec595", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91f302619-ae61-42e5-9cf0-d66a2015beec", "record_id": "flaws_cloudtrail:0000359:91f302619-ae61-42e5-9cf0-d66a2015beec", "row_index": 359, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91f302619-ae61-42e5-9cf0-d66a2015beec", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87760f0-9f6d-43bd-8d8c-9028b1c75708", "record_id": "flaws_cloudtrail:0000360:87760f0-9f6d-43bd-8d8c-9028b1c75708", "row_index": 360, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87760f0-9f6d-43bd-8d8c-9028b1c75708", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf518884-87dd-40ec-9872-f5e9248a6e18", "record_id": "flaws_cloudtrail:0000361:cf518884-87dd-40ec-9872-f5e9248a6e18", "row_index": 361, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf518884-87dd-40ec-9872-f5e9248a6e18", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6e46fb2-053b-406c-a1c0-e2bedbf7e649", "record_id": "flaws_cloudtrail:0000362:d6e46fb2-053b-406c-a1c0-e2bedbf7e649", "row_index": 362, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6e46fb2-053b-406c-a1c0-e2bedbf7e649", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1af3c2c0-11f5-470c-8d9f-0304cd154ec8", "record_id": "flaws_cloudtrail:0000363:1af3c2c0-11f5-470c-8d9f-0304cd154ec8", "row_index": 363, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAFVVAF610CIXT4VUX", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1af3c2c0-11f5-470c-8d9f-0304cd154ec8", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAFVVAF610CIXT4VUX", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T21:11:18Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6d680a8-c6c3-4c2e-a3b2-43e85dbe3d0c", "record_id": "flaws_cloudtrail:0000364:c6d680a8-c6c3-4c2e-a3b2-43e85dbe3d0c", "row_index": 364, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6d680a8-c6c3-4c2e-a3b2-43e85dbe3d0c", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd92db39-3f9e-4176-96a7-f518846b91d5", "record_id": "flaws_cloudtrail:0000365:fd92db39-3f9e-4176-96a7-f518846b91d5", "row_index": 365, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAI001M0EMVM5644N6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd92db39-3f9e-4176-96a7-f518846b91d5", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAI001M0EMVM5644N6", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T21:11:18Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91040ab5-6ea2-4996-b2dd-d88411a71ddd", "record_id": "flaws_cloudtrail:0000366:91040ab5-6ea2-4996-b2dd-d88411a71ddd", "row_index": 366, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91040ab5-6ea2-4996-b2dd-d88411a71ddd", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9258a02b-d535-4ff9-9b56-be3a20979d", "record_id": "flaws_cloudtrail:0000367:9258a02b-d535-4ff9-9b56-be3a20979d", "row_index": 367, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9258a02b-d535-4ff9-9b56-be3a20979d", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02a6a0e4-15f5-4374-a98b-bc4e0179ab0c", "record_id": "flaws_cloudtrail:0000368:02a6a0e4-15f5-4374-a98b-bc4e0179ab0c", "row_index": 368, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02a6a0e4-15f5-4374-a98b-bc4e0179ab0c", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "998c7622-4571-47d7-b6cd-fa0fa96d8f0e", "record_id": "flaws_cloudtrail:0000369:998c7622-4571-47d7-b6cd-fa0fa96d8f0e", "row_index": 369, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "998c7622-4571-47d7-b6cd-fa0fa96d8f0e", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d769e7d6-acf7-414d-818c-1311dc69012f", "record_id": "flaws_cloudtrail:0000370:d769e7d6-acf7-414d-818c-1311dc69012f", "row_index": 370, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 666, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d769e7d6-acf7-414d-818c-1311dc69012f", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcf7f4ec-f6f1-453b-8eeb-b84561264df4", "record_id": "flaws_cloudtrail:0000371:fcf7f4ec-f6f1-453b-8eeb-b84561264df4", "row_index": 371, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcf7f4ec-f6f1-453b-8eeb-b84561264df4", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ec40f2c-73df-4ff4-ac24-e9c774c62cbf", "record_id": "flaws_cloudtrail:0000372:1ec40f2c-73df-4ff4-ac24-e9c774c62cbf", "row_index": 372, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ec40f2c-73df-4ff4-ac24-e9c774c62cbf", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be980355-b3ca-4de0-b539-2ef62deeca29", "record_id": "flaws_cloudtrail:0000373:be980355-b3ca-4de0-b539-2ef62deeca29", "row_index": 373, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be980355-b3ca-4de0-b539-2ef62deeca29", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55b70d44-46bb-4de8-a5f7-d91986ae3a6", "record_id": "flaws_cloudtrail:0000374:55b70d44-46bb-4de8-a5f7-d91986ae3a6", "row_index": 374, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55b70d44-46bb-4de8-a5f7-d91986ae3a6", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85b87b32-af8f-4195-a829-b47774c66b81", "record_id": "flaws_cloudtrail:0000375:85b87b32-af8f-4195-a829-b47774c66b81", "row_index": 375, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85b87b32-af8f-4195-a829-b47774c66b81", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6adc3496-73d5-44a1-aa30-06e3cd3af908", "record_id": "flaws_cloudtrail:0000376:6adc3496-73d5-44a1-aa30-06e3cd3af908", "row_index": 376, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6adc3496-73d5-44a1-aa30-06e3cd3af908", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93f1ed50-27b2-423d-b0a8-c869da0a5fd8", "record_id": "flaws_cloudtrail:0000377:93f1ed50-27b2-423d-b0a8-c869da0a5fd8", "row_index": 377, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93f1ed50-27b2-423d-b0a8-c869da0a5fd8", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5b940f2-5d72-4fa1-9f6a-7ef19ea619ef", "record_id": "flaws_cloudtrail:0000378:b5b940f2-5d72-4fa1-9f6a-7ef19ea619ef", "row_index": 378, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5b940f2-5d72-4fa1-9f6a-7ef19ea619ef", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64aac170-f9a2-4185-8302-1db53c7570d1", "record_id": "flaws_cloudtrail:0000379:64aac170-f9a2-4185-8302-1db53c7570d1", "row_index": 379, "timestamp": "2017-05-26T21:11:18Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64aac170-f9a2-4185-8302-1db53c7570d1", "eventTime": "2017-05-26T21:11:18Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "544656e8-bf60-403e-b005-ac3c5f323cd0", "record_id": "flaws_cloudtrail:0000380:544656e8-bf60-403e-b005-ac3c5f323cd0", "row_index": 380, "timestamp": "2017-05-26T21:11:18Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "544656e8-bf60-403e-b005-ac3c5f323cd0", "eventTime": "2017-05-26T21:11:18Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb5af89f-b175-4204-9e42-9ac9e7de839d", "record_id": "flaws_cloudtrail:0000381:fb5af89f-b175-4204-9e42-9ac9e7de839d", "row_index": 381, "timestamp": "2017-05-26T21:11:19Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb5af89f-b175-4204-9e42-9ac9e7de839d", "eventTime": "2017-05-26T21:11:19Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2738da5-edec-4072-b964-e56119efa021", "record_id": "flaws_cloudtrail:0000382:f2738da5-edec-4072-b964-e56119efa021", "row_index": 382, "timestamp": "2017-05-26T21:11:19Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 662, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2738da5-edec-4072-b964-e56119efa021", "eventTime": "2017-05-26T21:11:19Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71d7e6b1-08c2-41d7-9cb3-a1675bac5c59", "record_id": "flaws_cloudtrail:0000383:71d7e6b1-08c2-41d7-9cb3-a1675bac5c59", "row_index": 383, "timestamp": "2017-05-26T21:11:19Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71d7e6b1-08c2-41d7-9cb3-a1675bac5c59", "eventTime": "2017-05-26T21:11:19Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f78bafb-357b-49da-b715-e1b2f73335", "record_id": "flaws_cloudtrail:0000384:2f78bafb-357b-49da-b715-e1b2f73335", "row_index": 384, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f78bafb-357b-49da-b715-e1b2f73335", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2efa5af9-fcfa-4c73-9af0-2a89147ff", "record_id": "flaws_cloudtrail:0000385:2efa5af9-fcfa-4c73-9af0-2a89147ff", "row_index": 385, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2efa5af9-fcfa-4c73-9af0-2a89147ff", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eeae6fcc-f4de-4b98-8326-5477df8a6fb7", "record_id": "flaws_cloudtrail:0000386:eeae6fcc-f4de-4b98-8326-5477df8a6fb7", "row_index": 386, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eeae6fcc-f4de-4b98-8326-5477df8a6fb7", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54cac63a-6d35-4a47-b78d-ebc459be24b2", "record_id": "flaws_cloudtrail:0000387:54cac63a-6d35-4a47-b78d-ebc459be24b2", "row_index": 387, "timestamp": "2017-05-26T21:11:19Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 662, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54cac63a-6d35-4a47-b78d-ebc459be24b2", "eventTime": "2017-05-26T21:11:19Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d53fe431-fb6b-4f1a-904f-dab3b3bceda9", "record_id": "flaws_cloudtrail:0000388:d53fe431-fb6b-4f1a-904f-dab3b3bceda9", "row_index": 388, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 661, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d53fe431-fb6b-4f1a-904f-dab3b3bceda9", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "031923-76c0-43d1-aeae-7a9537351a3a", "record_id": "flaws_cloudtrail:0000389:031923-76c0-43d1-aeae-7a9537351a3a", "row_index": 389, "timestamp": "2017-05-26T21:11:19Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "031923-76c0-43d1-aeae-7a9537351a3a", "eventTime": "2017-05-26T21:11:19Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba2ed94c-ffd4-49fa-b6d8-a1b7d31aa5e5", "record_id": "flaws_cloudtrail:0000390:ba2ed94c-ffd4-49fa-b6d8-a1b7d31aa5e5", "row_index": 390, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba2ed94c-ffd4-49fa-b6d8-a1b7d31aa5e5", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39e1ffa3-2576-4156-b7e7-827a44b112e0", "record_id": "flaws_cloudtrail:0000391:39e1ffa3-2576-4156-b7e7-827a44b112e0", "row_index": 391, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 661, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39e1ffa3-2576-4156-b7e7-827a44b112e0", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b108094-4b40-4965-93e6-24bf7876d449", "record_id": "flaws_cloudtrail:0000392:b108094-4b40-4965-93e6-24bf7876d449", "row_index": 392, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b108094-4b40-4965-93e6-24bf7876d449", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82e46f58-c801-4d43-bae2-80c97a2a510a", "record_id": "flaws_cloudtrail:0000393:82e46f58-c801-4d43-bae2-80c97a2a510a", "row_index": 393, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82e46f58-c801-4d43-bae2-80c97a2a510a", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9823b41-4987-453a-bb3e-63296714ec08", "record_id": "flaws_cloudtrail:0000394:b9823b41-4987-453a-bb3e-63296714ec08", "row_index": 394, "timestamp": "2017-05-26T21:11:19Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9823b41-4987-453a-bb3e-63296714ec08", "eventTime": "2017-05-26T21:11:19Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c49f4e52-4663-4e1b-9d57-e877cdf888577", "record_id": "flaws_cloudtrail:0000395:c49f4e52-4663-4e1b-9d57-e877cdf888577", "row_index": 395, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c49f4e52-4663-4e1b-9d57-e877cdf888577", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0767bd6-ffd8-4d2e-a760-2ee0641b8626", "record_id": "flaws_cloudtrail:0000396:f0767bd6-ffd8-4d2e-a760-2ee0641b8626", "row_index": 396, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0767bd6-ffd8-4d2e-a760-2ee0641b8626", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "564b6499-3f61-4cfa-af4e-5be98a95b419", "record_id": "flaws_cloudtrail:0000397:564b6499-3f61-4cfa-af4e-5be98a95b419", "row_index": 397, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "564b6499-3f61-4cfa-af4e-5be98a95b419", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9d5006a-3875-4aaa-9edd-79a7af077b26", "record_id": "flaws_cloudtrail:0000398:d9d5006a-3875-4aaa-9edd-79a7af077b26", "row_index": 398, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9d5006a-3875-4aaa-9edd-79a7af077b26", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18ba8a2e-1b19-4851-b4a5-1389eb700120", "record_id": "flaws_cloudtrail:0000399:18ba8a2e-1b19-4851-b4a5-1389eb700120", "row_index": 399, "timestamp": "2017-05-26T21:11:19Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18ba8a2e-1b19-4851-b4a5-1389eb700120", "eventTime": "2017-05-26T21:11:19Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e51760-fa5c-417c-bfa6-e32857d2d2bf", "record_id": "flaws_cloudtrail:0000400:e51760-fa5c-417c-bfa6-e32857d2d2bf", "row_index": 400, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e51760-fa5c-417c-bfa6-e32857d2d2bf", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bddfa966-5ada-4b2c-8565-38cffe86a4ee", "record_id": "flaws_cloudtrail:0000401:bddfa966-5ada-4b2c-8565-38cffe86a4ee", "row_index": 401, "timestamp": "2017-05-26T21:11:19Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bddfa966-5ada-4b2c-8565-38cffe86a4ee", "eventTime": "2017-05-26T21:11:19Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d07ccaa-4fa3-42e6-893c-6fe4727e0682", "record_id": "flaws_cloudtrail:0000402:9d07ccaa-4fa3-42e6-893c-6fe4727e0682", "row_index": 402, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAOW91HQRLNY4WC186", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d07ccaa-4fa3-42e6-893c-6fe4727e0682", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAOW91HQRLNY4WC186", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T21:11:19Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4f59ada-7761-4693-86a3-035197ad1fb", "record_id": "flaws_cloudtrail:0000403:a4f59ada-7761-4693-86a3-035197ad1fb", "row_index": 403, "timestamp": "2017-05-26T21:11:19Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4f59ada-7761-4693-86a3-035197ad1fb", "eventTime": "2017-05-26T21:11:19Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1ddec29-8660-4990-baeb-1316b997b695", "record_id": "flaws_cloudtrail:0000404:a1ddec29-8660-4990-baeb-1316b997b695", "row_index": 404, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1ddec29-8660-4990-baeb-1316b997b695", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "292cda30-354e-47b9-9093-907381068857", "record_id": "flaws_cloudtrail:0000405:292cda30-354e-47b9-9093-907381068857", "row_index": 405, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "292cda30-354e-47b9-9093-907381068857", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f44afec-57f5-4032-8b04-40fd6cb74f15", "record_id": "flaws_cloudtrail:0000406:3f44afec-57f5-4032-8b04-40fd6cb74f15", "row_index": 406, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f44afec-57f5-4032-8b04-40fd6cb74f15", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2a33959-eab0-4666-9960-a765b5c0d62e", "record_id": "flaws_cloudtrail:0000407:b2a33959-eab0-4666-9960-a765b5c0d62e", "row_index": 407, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2a33959-eab0-4666-9960-a765b5c0d62e", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15b345654-9705-4eb7-b5e9-695f457a6bd1", "record_id": "flaws_cloudtrail:0000408:15b345654-9705-4eb7-b5e9-695f457a6bd1", "row_index": 408, "timestamp": "2017-05-26T21:11:19Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15b345654-9705-4eb7-b5e9-695f457a6bd1", "eventTime": "2017-05-26T21:11:19Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ea2ef55-fdae-4289-a339-368576f9e18c", "record_id": "flaws_cloudtrail:0000409:2ea2ef55-fdae-4289-a339-368576f9e18c", "row_index": 409, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ea2ef55-fdae-4289-a339-368576f9e18c", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c2a8d85-baf0-4a4c-a028-8e588f3ab04d", "record_id": "flaws_cloudtrail:0000410:9c2a8d85-baf0-4a4c-a028-8e588f3ab04d", "row_index": 410, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c2a8d85-baf0-4a4c-a028-8e588f3ab04d", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bb7461c-211e-4f19-8fdf-8b5c8161cc12", "record_id": "flaws_cloudtrail:0000411:5bb7461c-211e-4f19-8fdf-8b5c8161cc12", "row_index": 411, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bb7461c-211e-4f19-8fdf-8b5c8161cc12", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b75bf4a-9716-4c3c-8616-c956f65df27a", "record_id": "flaws_cloudtrail:0000412:7b75bf4a-9716-4c3c-8616-c956f65df27a", "row_index": 412, "timestamp": "2017-05-26T21:11:19Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAD559PR1HHLS3G46Y", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b75bf4a-9716-4c3c-8616-c956f65df27a", "eventTime": "2017-05-26T21:11:19Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAD559PR1HHLS3G46Y", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T21:11:19Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0925c889-7bd6-4b52-8c15-d7b23dc692fe", "record_id": "flaws_cloudtrail:0000413:0925c889-7bd6-4b52-8c15-d7b23dc692fe", "row_index": 413, "timestamp": "2017-05-26T21:11:19Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 629, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0925c889-7bd6-4b52-8c15-d7b23dc692fe", "eventTime": "2017-05-26T21:11:19Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb965f63-ec5b-4554-b5cf-b4385cd9b9e9", "record_id": "flaws_cloudtrail:0000414:bb965f63-ec5b-4554-b5cf-b4385cd9b9e9", "row_index": 414, "timestamp": "2017-05-26T21:11:20Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 662, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb965f63-ec5b-4554-b5cf-b4385cd9b9e9", "eventTime": "2017-05-26T21:11:20Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c22c3fd-35ff-4819-bb78-801f5a52d06f", "record_id": "flaws_cloudtrail:0000415:3c22c3fd-35ff-4819-bb78-801f5a52d06f", "row_index": 415, "timestamp": "2017-05-26T21:11:20Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c22c3fd-35ff-4819-bb78-801f5a52d06f", "eventTime": "2017-05-26T21:11:20Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5df7eb59-cac2-4e14-a0b2-763102a06fc81", "record_id": "flaws_cloudtrail:0000416:5df7eb59-cac2-4e14-a0b2-763102a06fc81", "row_index": 416, "timestamp": "2017-05-26T21:11:20Z", "event_type": "DescribeMetricFilters", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5df7eb59-cac2-4e14-a0b2-763102a06fc81", "eventTime": "2017-05-26T21:11:20Z", "eventName": "DescribeMetricFilters", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"limit": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d050acd-076d-426f-aefc-6b653c76f4fd", "record_id": "flaws_cloudtrail:0000417:7d050acd-076d-426f-aefc-6b653c76f4fd", "row_index": 417, "timestamp": "2017-05-26T21:11:20Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d050acd-076d-426f-aefc-6b653c76f4fd", "eventTime": "2017-05-26T21:11:20Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc285d56-10a1-4780-b35d-115d6c5ccf08", "record_id": "flaws_cloudtrail:0000418:bc285d56-10a1-4780-b35d-115d6c5ccf08", "row_index": 418, "timestamp": "2017-05-26T21:11:20Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc285d56-10a1-4780-b35d-115d6c5ccf08", "eventTime": "2017-05-26T21:11:20Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9342c56-e5eb-4b94-a5dc-779926006978", "record_id": "flaws_cloudtrail:0000419:b9342c56-e5eb-4b94-a5dc-779926006978", "row_index": 419, "timestamp": "2017-05-26T21:11:20Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9342c56-e5eb-4b94-a5dc-779926006978", "eventTime": "2017-05-26T21:11:20Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c56200-b859-4b0c-be45-a99bf527cf0f", "record_id": "flaws_cloudtrail:0000420:2c56200-b859-4b0c-be45-a99bf527cf0f", "row_index": 420, "timestamp": "2017-05-26T21:11:20Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c56200-b859-4b0c-be45-a99bf527cf0f", "eventTime": "2017-05-26T21:11:20Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d080a718-001f-4f4b-aeed-10d1476d64ba", "record_id": "flaws_cloudtrail:0000421:d080a718-001f-4f4b-aeed-10d1476d64ba", "row_index": 421, "timestamp": "2017-05-26T21:11:20Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAGDL31V8E59KS44U9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d080a718-001f-4f4b-aeed-10d1476d64ba", "eventTime": "2017-05-26T21:11:20Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAGDL31V8E59KS44U9", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T21:11:20Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30ea6af8-c944-4ccb-aaa4-ecc331308c8b", "record_id": "flaws_cloudtrail:0000422:30ea6af8-c944-4ccb-aaa4-ecc331308c8b", "row_index": 422, "timestamp": "2017-05-26T21:11:20Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30ea6af8-c944-4ccb-aaa4-ecc331308c8b", "eventTime": "2017-05-26T21:11:20Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd0e2968-916a-4e2b-8751-d9f81b6ab090", "record_id": "flaws_cloudtrail:0000423:fd0e2968-916a-4e2b-8751-d9f81b6ab090", "row_index": 423, "timestamp": "2017-05-26T21:11:20Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd0e2968-916a-4e2b-8751-d9f81b6ab090", "eventTime": "2017-05-26T21:11:20Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "759686f-aebe-46ce-9ae6-a312f38914", "record_id": "flaws_cloudtrail:0000424:759686f-aebe-46ce-9ae6-a312f38914", "row_index": 424, "timestamp": "2017-05-26T21:11:20Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "759686f-aebe-46ce-9ae6-a312f38914", "eventTime": "2017-05-26T21:11:20Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "505060ec-b6ab-4ce0-ba76-eba28067d8", "record_id": "flaws_cloudtrail:0000425:505060ec-b6ab-4ce0-ba76-eba28067d8", "row_index": 425, "timestamp": "2017-05-26T21:11:20Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "505060ec-b6ab-4ce0-ba76-eba28067d8", "eventTime": "2017-05-26T21:11:20Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b7587f4-53f8-440c-88b2-cde55186", "record_id": "flaws_cloudtrail:0000426:5b7587f4-53f8-440c-88b2-cde55186", "row_index": 426, "timestamp": "2017-05-26T21:11:20Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b7587f4-53f8-440c-88b2-cde55186", "eventTime": "2017-05-26T21:11:20Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "373213b1-83ea-4ac9-9f30-db80f736de33", "record_id": "flaws_cloudtrail:0000427:373213b1-83ea-4ac9-9f30-db80f736de33", "row_index": 427, "timestamp": "2017-05-26T21:11:20Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "373213b1-83ea-4ac9-9f30-db80f736de33", "eventTime": "2017-05-26T21:11:20Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "386671d20-2632-419c-901b-6cc27d72d0c5", "record_id": "flaws_cloudtrail:0000428:386671d20-2632-419c-901b-6cc27d72d0c5", "row_index": 428, "timestamp": "2017-05-26T21:11:20Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "386671d20-2632-419c-901b-6cc27d72d0c5", "eventTime": "2017-05-26T21:11:20Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46e15235-def0-4cf0-8dc0-4e77ec68de0a", "record_id": "flaws_cloudtrail:0000429:46e15235-def0-4cf0-8dc0-4e77ec68de0a", "row_index": 429, "timestamp": "2017-05-26T21:11:20Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46e15235-def0-4cf0-8dc0-4e77ec68de0a", "eventTime": "2017-05-26T21:11:20Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "268aa02f-cf22-4a4e-878a-68ea8c47af22", "record_id": "flaws_cloudtrail:0000430:268aa02f-cf22-4a4e-878a-68ea8c47af22", "row_index": 430, "timestamp": "2017-05-26T21:11:20Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "268aa02f-cf22-4a4e-878a-68ea8c47af22", "eventTime": "2017-05-26T21:11:20Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0f95ed7-a1c9-4bb0-ba79-3dc396bf0be3", "record_id": "flaws_cloudtrail:0000431:e0f95ed7-a1c9-4bb0-ba79-3dc396bf0be3", "row_index": 431, "timestamp": "2017-05-26T21:11:20Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0f95ed7-a1c9-4bb0-ba79-3dc396bf0be3", "eventTime": "2017-05-26T21:11:20Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"identityType": "Domain"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "387fbd37-8c4f-4c7e-83da-39d3d658efbd", "record_id": "flaws_cloudtrail:0000432:387fbd37-8c4f-4c7e-83da-39d3d658efbd", "row_index": 432, "timestamp": "2017-05-26T21:11:21Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 652, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "387fbd37-8c4f-4c7e-83da-39d3d658efbd", "eventTime": "2017-05-26T21:11:21Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "950fe3b0-07ba-441c-a481-362817c", "record_id": "flaws_cloudtrail:0000433:950fe3b0-07ba-441c-a481-362817c", "row_index": 433, "timestamp": "2017-05-26T21:11:21Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 646, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "950fe3b0-07ba-441c-a481-362817c", "eventTime": "2017-05-26T21:11:21Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "caa14820-c09f-4167-b52d-9c036f26d4b8", "record_id": "flaws_cloudtrail:0000434:caa14820-c09f-4167-b52d-9c036f26d4b8", "row_index": 434, "timestamp": "2017-05-26T21:11:21Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "caa14820-c09f-4167-b52d-9c036f26d4b8", "eventTime": "2017-05-26T21:11:21Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2dd5c08-a901-4a66-af2d-3b6d450532b7", "record_id": "flaws_cloudtrail:0000435:c2dd5c08-a901-4a66-af2d-3b6d450532b7", "row_index": 435, "timestamp": "2017-05-26T21:11:21Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAJ3VV8UKM56T6K5TH", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2dd5c08-a901-4a66-af2d-3b6d450532b7", "eventTime": "2017-05-26T21:11:21Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAJ3VV8UKM56T6K5TH", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T21:11:21Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7714ec6e-6483-4bbe-8908-e56347cf392", "record_id": "flaws_cloudtrail:0000436:7714ec6e-6483-4bbe-8908-e56347cf392", "row_index": 436, "timestamp": "2017-05-26T21:11:21Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7714ec6e-6483-4bbe-8908-e56347cf392", "eventTime": "2017-05-26T21:11:21Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "state", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f603098-3bdb-4ed6-914c-795c54b74ae2", "record_id": "flaws_cloudtrail:0000437:f603098-3bdb-4ed6-914c-795c54b74ae2", "row_index": 437, "timestamp": "2017-05-26T21:11:21Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f603098-3bdb-4ed6-914c-795c54b74ae2", "eventTime": "2017-05-26T21:11:21Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17cce195-d051-4be8-8d2c-d00368b0eaf0", "record_id": "flaws_cloudtrail:0000438:17cce195-d051-4be8-8d2c-d00368b0eaf0", "row_index": 438, "timestamp": "2017-05-26T21:11:21Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17cce195-d051-4be8-8d2c-d00368b0eaf0", "eventTime": "2017-05-26T21:11:21Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed8b4810-bab7-4e39-9362-52af5bffb92e", "record_id": "flaws_cloudtrail:0000439:ed8b4810-bab7-4e39-9362-52af5bffb92e", "row_index": 439, "timestamp": "2017-05-26T21:11:21Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed8b4810-bab7-4e39-9362-52af5bffb92e", "eventTime": "2017-05-26T21:11:21Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69753c5-4990-457c-b84f-7580e90b52dd", "record_id": "flaws_cloudtrail:0000440:69753c5-4990-457c-b84f-7580e90b52dd", "row_index": 440, "timestamp": "2017-05-26T21:11:21Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69753c5-4990-457c-b84f-7580e90b52dd", "eventTime": "2017-05-26T21:11:21Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14d55857-f3e9-4876-bc01-b055407f9c", "record_id": "flaws_cloudtrail:0000441:14d55857-f3e9-4876-bc01-b055407f9c", "row_index": 441, "timestamp": "2017-05-26T21:11:21Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14d55857-f3e9-4876-bc01-b055407f9c", "eventTime": "2017-05-26T21:11:21Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "251ec082-cabd-45c5-ac5c-3fc5e2aabf9c", "record_id": "flaws_cloudtrail:0000442:251ec082-cabd-45c5-ac5c-3fc5e2aabf9c", "row_index": 442, "timestamp": "2017-05-26T21:11:21Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "251ec082-cabd-45c5-ac5c-3fc5e2aabf9c", "eventTime": "2017-05-26T21:11:21Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c42bd40-a2f6-4881-b790-cc9ca719aeaf", "record_id": "flaws_cloudtrail:0000443:7c42bd40-a2f6-4881-b790-cc9ca719aeaf", "row_index": 443, "timestamp": "2017-05-26T21:11:21Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c42bd40-a2f6-4881-b790-cc9ca719aeaf", "eventTime": "2017-05-26T21:11:21Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02690bc-1651-40d3-b429-ae36b577781fc", "record_id": "flaws_cloudtrail:0000444:02690bc-1651-40d3-b429-ae36b577781fc", "row_index": 444, "timestamp": "2017-05-26T21:11:21Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02690bc-1651-40d3-b429-ae36b577781fc", "eventTime": "2017-05-26T21:11:21Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebbc4d03-0485-4e3e-b571-d58a0cf2c152", "record_id": "flaws_cloudtrail:0000445:ebbc4d03-0485-4e3e-b571-d58a0cf2c152", "row_index": 445, "timestamp": "2017-05-26T21:11:21Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebbc4d03-0485-4e3e-b571-d58a0cf2c152", "eventTime": "2017-05-26T21:11:21Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "671ef851-5e46-4df4-8217-fcef733dff42", "record_id": "flaws_cloudtrail:0000446:671ef851-5e46-4df4-8217-fcef733dff42", "row_index": 446, "timestamp": "2017-05-26T21:11:21Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "671ef851-5e46-4df4-8217-fcef733dff42", "eventTime": "2017-05-26T21:11:21Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0834a8c5-5a32-40cc-97e8-639b307ef9f1", "record_id": "flaws_cloudtrail:0000447:0834a8c5-5a32-40cc-97e8-639b307ef9f1", "row_index": 447, "timestamp": "2017-05-26T21:11:21Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0834a8c5-5a32-40cc-97e8-639b307ef9f1", "eventTime": "2017-05-26T21:11:21Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f134ec6e-35d0-4978-a550-eda9242a29be", "record_id": "flaws_cloudtrail:0000448:f134ec6e-35d0-4978-a550-eda9242a29be", "row_index": 448, "timestamp": "2017-05-26T21:11:21Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 671, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f134ec6e-35d0-4978-a550-eda9242a29be", "eventTime": "2017-05-26T21:11:21Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"identityType": "Domain"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6a9d86f-4a03-4ba3-ab1e-55ffa1f77d67", "record_id": "flaws_cloudtrail:0000449:f6a9d86f-4a03-4ba3-ab1e-55ffa1f77d67", "row_index": 449, "timestamp": "2017-05-26T21:11:21Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 646, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6a9d86f-4a03-4ba3-ab1e-55ffa1f77d67", "eventTime": "2017-05-26T21:11:21Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0052d392-6065-4527-87a4-7b8a0530c199", "record_id": "flaws_cloudtrail:0000450:0052d392-6065-4527-87a4-7b8a0530c199", "row_index": 450, "timestamp": "2017-05-26T21:11:21Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 647, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0052d392-6065-4527-87a4-7b8a0530c199", "eventTime": "2017-05-26T21:11:21Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76b745cc-1794-44c3-bf74-d5163c2c27ea", "record_id": "flaws_cloudtrail:0000451:76b745cc-1794-44c3-bf74-d5163c2c27ea", "row_index": 451, "timestamp": "2017-05-26T21:11:21Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76b745cc-1794-44c3-bf74-d5163c2c27ea", "eventTime": "2017-05-26T21:11:21Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"identityType": "Domain"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1485dc09-4fd5-400f-8e7e-461e43e81687", "record_id": "flaws_cloudtrail:0000452:1485dc09-4fd5-400f-8e7e-461e43e81687", "row_index": 452, "timestamp": "2017-05-26T21:11:21Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 645, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1485dc09-4fd5-400f-8e7e-461e43e81687", "eventTime": "2017-05-26T21:11:21Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "585273eb9-0064-4bfd-b50d-29fd85df2e31", "record_id": "flaws_cloudtrail:0000453:585273eb9-0064-4bfd-b50d-29fd85df2e31", "row_index": 453, "timestamp": "2017-05-26T21:11:22Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "585273eb9-0064-4bfd-b50d-29fd85df2e31", "eventTime": "2017-05-26T21:11:22Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edca4e01-dde6-4755-a9d9-687f10df9165", "record_id": "flaws_cloudtrail:0000454:edca4e01-dde6-4755-a9d9-687f10df9165", "row_index": 454, "timestamp": "2017-05-26T21:11:22Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 652, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edca4e01-dde6-4755-a9d9-687f10df9165", "eventTime": "2017-05-26T21:11:22Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95a2567c-e2b4-49cc-9fbe-aad1202a8f4d", "record_id": "flaws_cloudtrail:0000455:95a2567c-e2b4-49cc-9fbe-aad1202a8f4d", "row_index": 455, "timestamp": "2017-05-26T21:11:22Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 652, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95a2567c-e2b4-49cc-9fbe-aad1202a8f4d", "eventTime": "2017-05-26T21:11:22Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "108ea560-e00d-4460-95d2-064363d0781", "record_id": "flaws_cloudtrail:0000456:108ea560-e00d-4460-95d2-064363d0781", "row_index": 456, "timestamp": "2017-05-26T21:11:22Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 649, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "108ea560-e00d-4460-95d2-064363d0781", "eventTime": "2017-05-26T21:11:22Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9fad573-892d-4b50-8f17-bd5b66272f93", "record_id": "flaws_cloudtrail:0000457:e9fad573-892d-4b50-8f17-bd5b66272f93", "row_index": 457, "timestamp": "2017-05-26T21:11:22Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 650, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9fad573-892d-4b50-8f17-bd5b66272f93", "eventTime": "2017-05-26T21:11:22Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29c94b74-4c62-4e30-aa74-1dbf41c22837", "record_id": "flaws_cloudtrail:0000458:29c94b74-4c62-4e30-aa74-1dbf41c22837", "row_index": 458, "timestamp": "2017-05-26T21:11:22Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 648, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29c94b74-4c62-4e30-aa74-1dbf41c22837", "eventTime": "2017-05-26T21:11:22Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3db8544c-9d5f-4e9d-9378-35b046cc0d20", "record_id": "flaws_cloudtrail:0000459:3db8544c-9d5f-4e9d-9378-35b046cc0d20", "row_index": 459, "timestamp": "2017-05-26T21:11:22Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 647, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3db8544c-9d5f-4e9d-9378-35b046cc0d20", "eventTime": "2017-05-26T21:11:22Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f16c15a0-c70b-4af5-8ad7-1e04856aad49", "record_id": "flaws_cloudtrail:0000460:f16c15a0-c70b-4af5-8ad7-1e04856aad49", "row_index": 460, "timestamp": "2017-05-26T21:11:22Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 646, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f16c15a0-c70b-4af5-8ad7-1e04856aad49", "eventTime": "2017-05-26T21:11:22Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1af0e99b-a056-4cae-a72e-d3fc573988e0", "record_id": "flaws_cloudtrail:0000461:1af0e99b-a056-4cae-a72e-d3fc573988e0", "row_index": 461, "timestamp": "2017-05-26T21:11:23Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 648, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1af0e99b-a056-4cae-a72e-d3fc573988e0", "eventTime": "2017-05-26T21:11:23Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37267f16-0d17-4940-a833-4fc10fa060400", "record_id": "flaws_cloudtrail:0000462:37267f16-0d17-4940-a833-4fc10fa060400", "row_index": 462, "timestamp": "2017-05-26T21:11:23Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 648, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37267f16-0d17-4940-a833-4fc10fa060400", "eventTime": "2017-05-26T21:11:23Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbdecd37-3095-4967-9e92-706d8413a7ea", "record_id": "flaws_cloudtrail:0000463:fbdecd37-3095-4967-9e92-706d8413a7ea", "row_index": 463, "timestamp": "2017-05-26T21:11:23Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbdecd37-3095-4967-9e92-706d8413a7ea", "eventTime": "2017-05-26T21:11:23Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80c52060-f26f-498a-b11b-5634ae55043e", "record_id": "flaws_cloudtrail:0000464:80c52060-f26f-498a-b11b-5634ae55043e", "row_index": 464, "timestamp": "2017-05-26T21:11:23Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80c52060-f26f-498a-b11b-5634ae55043e", "eventTime": "2017-05-26T21:11:23Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7f9fd64-e123-4697-93c8-0e8b9bdd7efd", "record_id": "flaws_cloudtrail:0000465:d7f9fd64-e123-4697-93c8-0e8b9bdd7efd", "row_index": 465, "timestamp": "2017-05-26T21:11:23Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7f9fd64-e123-4697-93c8-0e8b9bdd7efd", "eventTime": "2017-05-26T21:11:23Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "401f9f50-06e1-41c6-804c-da2b906c9245", "record_id": "flaws_cloudtrail:0000466:401f9f50-06e1-41c6-804c-da2b906c9245", "row_index": 466, "timestamp": "2017-05-26T21:11:23Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "401f9f50-06e1-41c6-804c-da2b906c9245", "eventTime": "2017-05-26T21:11:23Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60999-b128-4c66-b06c-da8319013882", "record_id": "flaws_cloudtrail:0000467:60999-b128-4c66-b06c-da8319013882", "row_index": 467, "timestamp": "2017-05-26T21:11:23Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60999-b128-4c66-b06c-da8319013882", "eventTime": "2017-05-26T21:11:23Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35fd7e1e-c8c7-499b-b14a-d4a1b00a0d13", "record_id": "flaws_cloudtrail:0000468:35fd7e1e-c8c7-499b-b14a-d4a1b00a0d13", "row_index": 468, "timestamp": "2017-05-26T21:11:23Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35fd7e1e-c8c7-499b-b14a-d4a1b00a0d13", "eventTime": "2017-05-26T21:11:23Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23e5fb2c-de69-450f-b1e0-bcac5c6bacb7", "record_id": "flaws_cloudtrail:0000469:23e5fb2c-de69-450f-b1e0-bcac5c6bacb7", "row_index": 469, "timestamp": "2017-05-26T21:11:23Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23e5fb2c-de69-450f-b1e0-bcac5c6bacb7", "eventTime": "2017-05-26T21:11:23Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb7dee91-361e-4039-9c0d-baac87c9fe46", "record_id": "flaws_cloudtrail:0000470:eb7dee91-361e-4039-9c0d-baac87c9fe46", "row_index": 470, "timestamp": "2017-05-26T21:11:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb7dee91-361e-4039-9c0d-baac87c9fe46", "eventTime": "2017-05-26T21:11:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45c223530-83f9-4688-8237-6a9cc521cc81", "record_id": "flaws_cloudtrail:0000471:45c223530-83f9-4688-8237-6a9cc521cc81", "row_index": 471, "timestamp": "2017-05-26T21:11:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45c223530-83f9-4688-8237-6a9cc521cc81", "eventTime": "2017-05-26T21:11:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "040219-59c9-4025-9b69-ca46eb1a826a", "record_id": "flaws_cloudtrail:0000472:040219-59c9-4025-9b69-ca46eb1a826a", "row_index": 472, "timestamp": "2017-05-26T21:11:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "040219-59c9-4025-9b69-ca46eb1a826a", "eventTime": "2017-05-26T21:11:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6de444143-280d-41ed-b011-72b9a3f4a986", "record_id": "flaws_cloudtrail:0000473:6de444143-280d-41ed-b011-72b9a3f4a986", "row_index": 473, "timestamp": "2017-05-26T21:11:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6de444143-280d-41ed-b011-72b9a3f4a986", "eventTime": "2017-05-26T21:11:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2b9c049-79ae-4d9d-9859-3286bc28a66a", "record_id": "flaws_cloudtrail:0000474:f2b9c049-79ae-4d9d-9859-3286bc28a66a", "row_index": 474, "timestamp": "2017-05-26T21:11:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2b9c049-79ae-4d9d-9859-3286bc28a66a", "eventTime": "2017-05-26T21:11:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a425786-6db3-469d-ab35-2697a5e882194", "record_id": "flaws_cloudtrail:0000475:a425786-6db3-469d-ab35-2697a5e882194", "row_index": 475, "timestamp": "2017-05-26T21:11:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a425786-6db3-469d-ab35-2697a5e882194", "eventTime": "2017-05-26T21:11:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26a2bd41-76ce-4d82-89cb-a83aa7dbfe1c", "record_id": "flaws_cloudtrail:0000476:26a2bd41-76ce-4d82-89cb-a83aa7dbfe1c", "row_index": 476, "timestamp": "2017-05-26T21:11:24Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26a2bd41-76ce-4d82-89cb-a83aa7dbfe1c", "eventTime": "2017-05-26T21:11:24Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d19b530-ee79-4e98-8e1a-31bf196036d9", "record_id": "flaws_cloudtrail:0000477:7d19b530-ee79-4e98-8e1a-31bf196036d9", "row_index": 477, "timestamp": "2017-05-26T21:11:24Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d19b530-ee79-4e98-8e1a-31bf196036d9", "eventTime": "2017-05-26T21:11:24Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a9f02f8-311b-4b0f-b965-4f280addd7a0", "record_id": "flaws_cloudtrail:0000478:6a9f02f8-311b-4b0f-b965-4f280addd7a0", "row_index": 478, "timestamp": "2017-05-26T21:11:24Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a9f02f8-311b-4b0f-b965-4f280addd7a0", "eventTime": "2017-05-26T21:11:24Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "634f11f6-b4d9-4c29-b708-0430f325e332", "record_id": "flaws_cloudtrail:0000479:634f11f6-b4d9-4c29-b708-0430f325e332", "row_index": 479, "timestamp": "2017-05-26T21:11:24Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "634f11f6-b4d9-4c29-b708-0430f325e332", "eventTime": "2017-05-26T21:11:24Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09e263d0-7640-499c-bf25-8ac1c579c163", "record_id": "flaws_cloudtrail:0000480:09e263d0-7640-499c-bf25-8ac1c579c163", "row_index": 480, "timestamp": "2017-05-26T21:11:24Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 631, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09e263d0-7640-499c-bf25-8ac1c579c163", "eventTime": "2017-05-26T21:11:24Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a132f8da-ff38-4734-97e4-04c7bb5d6662", "record_id": "flaws_cloudtrail:0000481:a132f8da-ff38-4734-97e4-04c7bb5d6662", "row_index": 481, "timestamp": "2017-05-26T21:11:25Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a132f8da-ff38-4734-97e4-04c7bb5d6662", "eventTime": "2017-05-26T21:11:25Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "479118-4508-4577-a12e-962035ee2640", "record_id": "flaws_cloudtrail:0000482:479118-4508-4577-a12e-962035ee2640", "row_index": 482, "timestamp": "2017-05-26T21:11:25Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "479118-4508-4577-a12e-962035ee2640", "eventTime": "2017-05-26T21:11:25Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d87344-5715-41e0-a0e2-53d040911c", "record_id": "flaws_cloudtrail:0000483:d87344-5715-41e0-a0e2-53d040911c", "row_index": 483, "timestamp": "2017-05-26T21:11:25Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d87344-5715-41e0-a0e2-53d040911c", "eventTime": "2017-05-26T21:11:25Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc2f25ff-30b8-4142-85d6-9d86c8d5f83d", "record_id": "flaws_cloudtrail:0000484:dc2f25ff-30b8-4142-85d6-9d86c8d5f83d", "row_index": 484, "timestamp": "2017-05-26T21:11:25Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 641, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc2f25ff-30b8-4142-85d6-9d86c8d5f83d", "eventTime": "2017-05-26T21:11:25Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ea38ee8-4a62-4545-8e96-daf2e0b403327", "record_id": "flaws_cloudtrail:0000485:1ea38ee8-4a62-4545-8e96-daf2e0b403327", "row_index": 485, "timestamp": "2017-05-26T21:11:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 629, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ea38ee8-4a62-4545-8e96-daf2e0b403327", "eventTime": "2017-05-26T21:11:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f865b7ca-809d-45df-bcec-88a9c50d22c5", "record_id": "flaws_cloudtrail:0000486:f865b7ca-809d-45df-bcec-88a9c50d22c5", "row_index": 486, "timestamp": "2017-05-26T21:11:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 628, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f865b7ca-809d-45df-bcec-88a9c50d22c5", "eventTime": "2017-05-26T21:11:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12721-dac0-4267-8953-39e97a6d591f", "record_id": "flaws_cloudtrail:0000487:12721-dac0-4267-8953-39e97a6d591f", "row_index": 487, "timestamp": "2017-05-26T21:11:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12721-dac0-4267-8953-39e97a6d591f", "eventTime": "2017-05-26T21:11:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2885eded-7eb1-4aee-8106-ece7d038177c", "record_id": "flaws_cloudtrail:0000488:2885eded-7eb1-4aee-8106-ece7d038177c", "row_index": 488, "timestamp": "2017-05-26T21:11:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2885eded-7eb1-4aee-8106-ece7d038177c", "eventTime": "2017-05-26T21:11:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f9d6e52-4e9d-48c9-a22d-348c3e7f72aa", "record_id": "flaws_cloudtrail:0000489:6f9d6e52-4e9d-48c9-a22d-348c3e7f72aa", "row_index": 489, "timestamp": "2017-05-26T21:11:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f9d6e52-4e9d-48c9-a22d-348c3e7f72aa", "eventTime": "2017-05-26T21:11:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "891fdd31-4683-4307-8900-bd2b6f674a59", "record_id": "flaws_cloudtrail:0000490:891fdd31-4683-4307-8900-bd2b6f674a59", "row_index": 490, "timestamp": "2017-05-26T21:11:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "891fdd31-4683-4307-8900-bd2b6f674a59", "eventTime": "2017-05-26T21:11:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a834434-0bcb-4a80-8515-67b115068d2e3", "record_id": "flaws_cloudtrail:0000491:a834434-0bcb-4a80-8515-67b115068d2e3", "row_index": 491, "timestamp": "2017-05-26T21:11:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a834434-0bcb-4a80-8515-67b115068d2e3", "eventTime": "2017-05-26T21:11:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf377b61-d548-4a12-ace3-b0fcc0cf118e", "record_id": "flaws_cloudtrail:0000492:bf377b61-d548-4a12-ace3-b0fcc0cf118e", "row_index": 492, "timestamp": "2017-05-26T21:11:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf377b61-d548-4a12-ace3-b0fcc0cf118e", "eventTime": "2017-05-26T21:11:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fbf705b-0d28-4d12-baf9-97e49802be1", "record_id": "flaws_cloudtrail:0000493:9fbf705b-0d28-4d12-baf9-97e49802be1", "row_index": 493, "timestamp": "2017-05-26T21:11:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fbf705b-0d28-4d12-baf9-97e49802be1", "eventTime": "2017-05-26T21:11:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-sdk-nodejs/2.58.0 linux/v4.2.6 callback]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d81bd80-0c31-4ec8-aaf3-593816e6c", "record_id": "flaws_cloudtrail:0000494:4d81bd80-0c31-4ec8-aaf3-593816e6c", "row_index": 494, "timestamp": "2017-05-26T21:15:14Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIARUIGFEHGRQOCKB2S", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "0.255.91.167", "user_agent": "[aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d81bd80-0c31-4ec8-aaf3-593816e6c", "eventTime": "2017-05-26T21:15:14Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.255.91.167", "userAgent": "[aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIARUIGFEHGRQOCKB2S", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T20:59:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43fc3a50-542a-4e3e-9604-7ee5c750564d8", "record_id": "flaws_cloudtrail:0000495:43fc3a50-542a-4e3e-9604-7ee5c750564d8", "row_index": 495, "timestamp": "2017-05-26T21:20:58Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.255.91.167", "user_agent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43fc3a50-542a-4e3e-9604-7ee5c750564d8", "eventTime": "2017-05-26T21:20:58Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.255.91.167", "userAgent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a69eab2-b9bd-40b2-9218-fabed19475b4", "record_id": "flaws_cloudtrail:0000496:8a69eab2-b9bd-40b2-9218-fabed19475b4", "row_index": 496, "timestamp": "2017-05-26T21:21:10Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.255.91.167", "user_agent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a69eab2-b9bd-40b2-9218-fabed19475b4", "eventTime": "2017-05-26T21:21:10Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.255.91.167", "userAgent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd0e525f-a806-40c6-adc1-a22f1b595fa6", "record_id": "flaws_cloudtrail:0000497:dd0e525f-a806-40c6-adc1-a22f1b595fa6", "row_index": 497, "timestamp": "2017-05-26T21:21:31Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.255.91.167", "user_agent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd0e525f-a806-40c6-adc1-a22f1b595fa6", "eventTime": "2017-05-26T21:21:31Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.255.91.167", "userAgent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: arn:aws:iam::811596193553:user/backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b20de029-5cc7-4f63-a9d8-be9f5e932eaf", "record_id": "flaws_cloudtrail:0000498:b20de029-5cc7-4f63-a9d8-be9f5e932eaf", "row_index": 498, "timestamp": "2017-05-26T21:21:37Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.255.91.167", "user_agent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 653, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b20de029-5cc7-4f63-a9d8-be9f5e932eaf", "eventTime": "2017-05-26T21:21:37Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.255.91.167", "userAgent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d8084da-c34d-49b7-89cc-8c5f08d78f4a", "record_id": "flaws_cloudtrail:0000499:2d8084da-c34d-49b7-89cc-8c5f08d78f4a", "row_index": 499, "timestamp": "2017-05-26T21:22:03Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.255.91.167", "user_agent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 657, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d8084da-c34d-49b7-89cc-8c5f08d78f4a", "eventTime": "2017-05-26T21:22:03Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.255.91.167", "userAgent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27a33b79-051e-4169-bfa9-409983efbb", "record_id": "flaws_cloudtrail:0000500:27a33b79-051e-4169-bfa9-409983efbb", "row_index": 500, "timestamp": "2017-05-26T21:22:11Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.255.91.167", "user_agent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27a33b79-051e-4169-bfa9-409983efbb", "eventTime": "2017-05-26T21:22:11Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.255.91.167", "userAgent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e9a64cd-98c1-4d15-959e-e700dc3eed3f", "record_id": "flaws_cloudtrail:0000501:6e9a64cd-98c1-4d15-959e-e700dc3eed3f", "row_index": 501, "timestamp": "2017-05-26T21:22:58Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAGB6YH3WVY0NL6HN2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "80.28.202.166", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 514, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e9a64cd-98c1-4d15-959e-e700dc3eed3f", "eventTime": "2017-05-26T21:22:58Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "80.28.202.166", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAGB6YH3WVY0NL6HN2", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5930d104-2bb6-4316-8e85-ab5d5f0ebfd0", "record_id": "flaws_cloudtrail:0000502:5930d104-2bb6-4316-8e85-ab5d5f0ebfd0", "row_index": 502, "timestamp": "2017-05-26T21:23:29Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAGB6YH3WVY0NL6HN2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "80.28.202.166", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 543, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5930d104-2bb6-4316-8e85-ab5d5f0ebfd0", "eventTime": "2017-05-26T21:23:29Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "80.28.202.166", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAGB6YH3WVY0NL6HN2", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f55794c-61a0-4fe1-9346-cc87641e6370", "record_id": "flaws_cloudtrail:0000503:4f55794c-61a0-4fe1-9346-cc87641e6370", "row_index": 503, "timestamp": "2017-05-26T21:24:00Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAGB6YH3WVY0NL6HN2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "80.28.202.166", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 543, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f55794c-61a0-4fe1-9346-cc87641e6370", "eventTime": "2017-05-26T21:24:00Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "80.28.202.166", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAGB6YH3WVY0NL6HN2", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73c00703-e7b3-489a-87cb-d1e8f534dce0", "record_id": "flaws_cloudtrail:0000504:73c00703-e7b3-489a-87cb-d1e8f534dce0", "row_index": 504, "timestamp": "2017-05-26T21:25:18Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAGB6YH3WVY0NL6HN2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "80.28.202.166", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 546, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73c00703-e7b3-489a-87cb-d1e8f534dce0", "eventTime": "2017-05-26T21:25:18Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "80.28.202.166", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAGB6YH3WVY0NL6HN2", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0add0fb-a0b9-4ae9-941a-52aedf1c8276", "record_id": "flaws_cloudtrail:0000505:a0add0fb-a0b9-4ae9-941a-52aedf1c8276", "row_index": 505, "timestamp": "2017-05-26T21:25:58Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAGB6YH3WVY0NL6HN2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "80.28.202.166", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 544, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0add0fb-a0b9-4ae9-941a-52aedf1c8276", "eventTime": "2017-05-26T21:25:58Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "80.28.202.166", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAGB6YH3WVY0NL6HN2", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56c31e34-afe7-43f3-8b24-8a4d64f31bce", "record_id": "flaws_cloudtrail:0000506:56c31e34-afe7-43f3-8b24-8a4d64f31bce", "row_index": 506, "timestamp": "2017-05-26T21:27:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAGB6YH3WVY0NL6HN2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "80.28.202.166", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 514, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56c31e34-afe7-43f3-8b24-8a4d64f31bce", "eventTime": "2017-05-26T21:27:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "80.28.202.166", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAGB6YH3WVY0NL6HN2", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a006711c-eb23-4bc6-b5d1-ce45dd98c181", "record_id": "flaws_cloudtrail:0000507:a006711c-eb23-4bc6-b5d1-ce45dd98c181", "row_index": 507, "timestamp": "2017-05-26T21:27:34Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAGB6YH3WVY0NL6HN2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "80.28.202.166", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 509, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a006711c-eb23-4bc6-b5d1-ce45dd98c181", "eventTime": "2017-05-26T21:27:34Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "80.28.202.166", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAGB6YH3WVY0NL6HN2", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5e01a00-eb07-4d02-835f-ba37f022ddc1", "record_id": "flaws_cloudtrail:0000508:f5e01a00-eb07-4d02-835f-ba37f022ddc1", "row_index": 508, "timestamp": "2017-05-26T21:28:08Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAGB6YH3WVY0NL6HN2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "80.28.202.166", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 519, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5e01a00-eb07-4d02-835f-ba37f022ddc1", "eventTime": "2017-05-26T21:28:08Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "80.28.202.166", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAGB6YH3WVY0NL6HN2", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38df1e64-e9bc-42de-8d05-5a895ddc64d8", "record_id": "flaws_cloudtrail:0000509:38df1e64-e9bc-42de-8d05-5a895ddc64d8", "row_index": 509, "timestamp": "2017-05-26T21:29:16Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAGB6YH3WVY0NL6HN2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "80.28.202.166", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 513, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38df1e64-e9bc-42de-8d05-5a895ddc64d8", "eventTime": "2017-05-26T21:29:16Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "80.28.202.166", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAGB6YH3WVY0NL6HN2", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32a82907-64c4-415a-81da-faec687cb98f", "record_id": "flaws_cloudtrail:0000510:32a82907-64c4-415a-81da-faec687cb98f", "row_index": 510, "timestamp": "2017-05-26T21:29:31Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.255.91.167", "user_agent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32a82907-64c4-415a-81da-faec687cb98f", "eventTime": "2017-05-26T21:29:31Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.255.91.167", "userAgent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4312765e-0a28-4bcd-bebd-2b3f4f6123e6", "record_id": "flaws_cloudtrail:0000511:4312765e-0a28-4bcd-bebd-2b3f4f6123e6", "row_index": 511, "timestamp": "2017-05-26T21:30:33Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAGB6YH3WVY0NL6HN2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "80.28.202.166", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 507, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4312765e-0a28-4bcd-bebd-2b3f4f6123e6", "eventTime": "2017-05-26T21:30:33Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "80.28.202.166", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAGB6YH3WVY0NL6HN2", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42bb3f18-0130-4ee3-a377-b7023bfe0989", "record_id": "flaws_cloudtrail:0000512:42bb3f18-0130-4ee3-a377-b7023bfe0989", "row_index": 512, "timestamp": "2017-05-26T21:30:36Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.255.91.167", "user_agent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42bb3f18-0130-4ee3-a377-b7023bfe0989", "eventTime": "2017-05-26T21:30:36Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.255.91.167", "userAgent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67c58552-0c6c-4b1d-96a9-cb470d0589df", "record_id": "flaws_cloudtrail:0000513:67c58552-0c6c-4b1d-96a9-cb470d0589df", "row_index": 513, "timestamp": "2017-05-26T21:32:15Z", "event_type": "ListFunctions", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAGB6YH3WVY0NL6HN2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "80.28.202.166", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 513, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67c58552-0c6c-4b1d-96a9-cb470d0589df", "eventTime": "2017-05-26T21:32:15Z", "eventName": "ListFunctions", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "80.28.202.166", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAGB6YH3WVY0NL6HN2", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ebbea53-9f3d-4644-b7f7-d957ba4a6312", "record_id": "flaws_cloudtrail:0000514:4ebbea53-9f3d-4644-b7f7-d957ba4a6312", "row_index": 514, "timestamp": "2017-05-26T21:33:56Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.255.91.167", "user_agent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ebbea53-9f3d-4644-b7f7-d957ba4a6312", "eventTime": "2017-05-26T21:33:56Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.255.91.167", "userAgent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9694fd1c-8a10-4316-967d-ec070280956e", "record_id": "flaws_cloudtrail:0000515:9694fd1c-8a10-4316-967d-ec070280956e", "row_index": 515, "timestamp": "2017-05-26T21:34:04Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.255.91.167", "user_agent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9694fd1c-8a10-4316-967d-ec070280956e", "eventTime": "2017-05-26T21:34:04Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.255.91.167", "userAgent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e321009f-18f5-4c1c-b53a-2c4478dea68c", "record_id": "flaws_cloudtrail:0000516:e321009f-18f5-4c1c-b53a-2c4478dea68c", "row_index": 516, "timestamp": "2017-05-26T21:34:08Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAGB6YH3WVY0NL6HN2", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "80.28.202.166", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 516, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e321009f-18f5-4c1c-b53a-2c4478dea68c", "eventTime": "2017-05-26T21:34:08Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "80.28.202.166", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAGB6YH3WVY0NL6HN2", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71c0f55e-b735-4c69-9d80-12c370489b31", "record_id": "flaws_cloudtrail:0000517:71c0f55e-b735-4c69-9d80-12c370489b31", "row_index": 517, "timestamp": "2017-05-26T21:34:49Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.255.91.167", "user_agent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71c0f55e-b735-4c69-9d80-12c370489b31", "eventTime": "2017-05-26T21:34:49Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.255.91.167", "userAgent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6277dff3-96ef-4b04-bd42-470370b8614", "record_id": "flaws_cloudtrail:0000518:6277dff3-96ef-4b04-bd42-470370b8614", "row_index": 518, "timestamp": "2017-05-26T21:34:53Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.255.91.167", "user_agent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6277dff3-96ef-4b04-bd42-470370b8614", "eventTime": "2017-05-26T21:34:53Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.255.91.167", "userAgent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "562867a2d-9fad-4b4d-9d70-352168aa0d88", "record_id": "flaws_cloudtrail:0000519:562867a2d-9fad-4b4d-9d70-352168aa0d88", "row_index": 519, "timestamp": "2017-05-26T21:35:08Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.255.91.167", "user_agent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "562867a2d-9fad-4b4d-9d70-352168aa0d88", "eventTime": "2017-05-26T21:35:08Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.255.91.167", "userAgent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ae4c1f3-3e33-42a9-a98a-5fab57231395", "record_id": "flaws_cloudtrail:0000520:0ae4c1f3-3e33-42a9-a98a-5fab57231395", "row_index": 520, "timestamp": "2017-05-26T21:37:40Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.255.91.167", "user_agent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ae4c1f3-3e33-42a9-a98a-5fab57231395", "eventTime": "2017-05-26T21:37:40Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.255.91.167", "userAgent": "aws-cli/1.11.91 Python/2.7.10 Darwin/16.6.0 botocore/1.5.54", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d60f0199-a9b8-44bc-abbd-757425a7b25e", "record_id": "flaws_cloudtrail:0000521:d60f0199-a9b8-44bc-abbd-757425a7b25e", "row_index": 521, "timestamp": "2017-05-26T21:37:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1214, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d60f0199-a9b8-44bc-abbd-757425a7b25e", "eventTime": "2017-05-26T21:37:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZ1FCG6MUI5FPGL7N", "expiration": "May 27, 2017 9:37:54 AM", "sessionToken": "FQoDYXdzEB8aDFkIy7Qb+UztAUqeXSLfAejrwJ4r2agGqmam1j9oTRIbmmAvrUOgzpZUPPtVhd+G3tTz7v17Kahp893cMA9jTWzSA7FrjI0e9duotLFZIbQJnlg6vbYBAAKhpg6Xq0oqMErvkWe/CrrLyEEbGsdzKt2mLPIpR0tY2I3r4/W8/JAFbjUZ6DzW8iuIB/9lZj1Ob14c0DG+pvqW5F+IJB0alETsOs7SEnFYknYntvSctcpAUuNCdsY2PrCav5gtAbrlyGSxM4nECgm+qKeIHJ5eVDpMbffmiWNdCUHX5+KaZ06UMH7O4gZpjtr6jjdADAgossCiyQU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cf25768-29fe-4579-846a-547bd83fb0ae", "record_id": "flaws_cloudtrail:0000522:8cf25768-29fe-4579-846a-547bd83fb0ae", "row_index": 522, "timestamp": "2017-05-26T21:37:55Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAZ1FCG6MUI5FPGL7N", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "1.194.1.62", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cf25768-29fe-4579-846a-547bd83fb0ae", "eventTime": "2017-05-26T21:37:55Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.194.1.62", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ1FCG6MUI5FPGL7N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T21:37:54Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2017/05/26/[$LATEST]23bea107dc9e9206396367c394937cdb", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b955c044-5d07-44fa-b7a2-cd3d0f495deb", "record_id": "flaws_cloudtrail:0000523:b955c044-5d07-44fa-b7a2-cd3d0f495deb", "row_index": 523, "timestamp": "2017-05-26T21:44:03Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b955c044-5d07-44fa-b7a2-cd3d0f495deb", "eventTime": "2017-05-26T21:44:03Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d8e4da5-35f9-4396-83bd-86985214401c", "record_id": "flaws_cloudtrail:0000524:5d8e4da5-35f9-4396-83bd-86985214401c", "row_index": 524, "timestamp": "2017-05-26T21:44:03Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d8e4da5-35f9-4396-83bd-86985214401c", "eventTime": "2017-05-26T21:44:03Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ebbe769-6ee4-4db9-a5e1-8087e088075f7", "record_id": "flaws_cloudtrail:0000525:9ebbe769-6ee4-4db9-a5e1-8087e088075f7", "row_index": 525, "timestamp": "2017-05-26T21:44:03Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ebbe769-6ee4-4db9-a5e1-8087e088075f7", "eventTime": "2017-05-26T21:44:03Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fa6dc69-f141-459c-a67e-822d4955de61", "record_id": "flaws_cloudtrail:0000526:9fa6dc69-f141-459c-a67e-822d4955de61", "row_index": 526, "timestamp": "2017-05-26T21:44:03Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fa6dc69-f141-459c-a67e-822d4955de61", "eventTime": "2017-05-26T21:44:03Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd6a0958-8c6f-4ac0-8db8-65380fd", "record_id": "flaws_cloudtrail:0000527:bd6a0958-8c6f-4ac0-8db8-65380fd", "row_index": 527, "timestamp": "2017-05-26T21:44:03Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd6a0958-8c6f-4ac0-8db8-65380fd", "eventTime": "2017-05-26T21:44:03Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b05b75f-3bfe-4d2f-ad52-df89bf432ca0", "record_id": "flaws_cloudtrail:0000528:8b05b75f-3bfe-4d2f-ad52-df89bf432ca0", "row_index": 528, "timestamp": "2017-05-26T21:44:03Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b05b75f-3bfe-4d2f-ad52-df89bf432ca0", "eventTime": "2017-05-26T21:44:03Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-b6ab3a24-1aa4-4855-94d4-40cdef59ec5b", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d2e5e47-b1cb-4dc7-8c28-36cea01d6243", "record_id": "flaws_cloudtrail:0000529:1d2e5e47-b1cb-4dc7-8c28-36cea01d6243", "row_index": 529, "timestamp": "2017-05-26T21:44:03Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d2e5e47-b1cb-4dc7-8c28-36cea01d6243", "eventTime": "2017-05-26T21:44:03Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eddd5f7b-db53-4e42-8442-46b3165efef0", "record_id": "flaws_cloudtrail:0000530:eddd5f7b-db53-4e42-8442-46b3165efef0", "row_index": 530, "timestamp": "2017-05-26T21:44:03Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eddd5f7b-db53-4e42-8442-46b3165efef0", "eventTime": "2017-05-26T21:44:03Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "184da219-0a07-4e9d-acdf-6cfc463f9428", "record_id": "flaws_cloudtrail:0000531:184da219-0a07-4e9d-acdf-6cfc463f9428", "row_index": 531, "timestamp": "2017-05-26T21:44:03Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "184da219-0a07-4e9d-acdf-6cfc463f9428", "eventTime": "2017-05-26T21:44:03Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "324ecac4-d948-48b6-bbb8-25fc508d683b", "record_id": "flaws_cloudtrail:0000532:324ecac4-d948-48b6-bbb8-25fc508d683b", "row_index": 532, "timestamp": "2017-05-26T21:44:03Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "324ecac4-d948-48b6-bbb8-25fc508d683b", "eventTime": "2017-05-26T21:44:03Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7df1f15-09e9-4c3d-9ffd-58b416f83efe", "record_id": "flaws_cloudtrail:0000533:e7df1f15-09e9-4c3d-9ffd-58b416f83efe", "row_index": 533, "timestamp": "2017-05-26T21:44:03Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7df1f15-09e9-4c3d-9ffd-58b416f83efe", "eventTime": "2017-05-26T21:44:03Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6ce9727-9ea8-49e8-bc1c-11eb1252baf7", "record_id": "flaws_cloudtrail:0000534:e6ce9727-9ea8-49e8-bc1c-11eb1252baf7", "row_index": 534, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6ce9727-9ea8-49e8-bc1c-11eb1252baf7", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d9ae93b-dd6d-4a53-9044-4fbf56051ae3", "record_id": "flaws_cloudtrail:0000535:2d9ae93b-dd6d-4a53-9044-4fbf56051ae3", "row_index": 535, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d9ae93b-dd6d-4a53-9044-4fbf56051ae3", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "950ce272-4398-42d0-8e7e-c096d1f3bdee", "record_id": "flaws_cloudtrail:0000536:950ce272-4398-42d0-8e7e-c096d1f3bdee", "row_index": 536, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "950ce272-4398-42d0-8e7e-c096d1f3bdee", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"pageSize": 400}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8ac32ef-18a6-42c4-a1fa-914772f8bc29", "record_id": "flaws_cloudtrail:0000537:c8ac32ef-18a6-42c4-a1fa-914772f8bc29", "row_index": 537, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeTargetGroups", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8ac32ef-18a6-42c4-a1fa-914772f8bc29", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeTargetGroups", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"targetGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2393d52e-3323-48c0-b102-fc7c1c0f6369", "record_id": "flaws_cloudtrail:0000538:2393d52e-3323-48c0-b102-fc7c1c0f6369", "row_index": 538, "timestamp": "2017-05-26T21:44:03Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 642, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2393d52e-3323-48c0-b102-fc7c1c0f6369", "eventTime": "2017-05-26T21:44:03Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "258e108d-092c-4e8f-ab17-7a3547b0ea01", "record_id": "flaws_cloudtrail:0000539:258e108d-092c-4e8f-ab17-7a3547b0ea01", "row_index": 539, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribePolicies", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "258e108d-092c-4e8f-ab17-7a3547b0ea01", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribePolicies", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63c211b1-10fd-4c82-8a1f-26cfaa767ff9", "record_id": "flaws_cloudtrail:0000540:63c211b1-10fd-4c82-8a1f-26cfaa767ff9", "row_index": 540, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeScalingActivities", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63c211b1-10fd-4c82-8a1f-26cfaa767ff9", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeScalingActivities", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c168ffef-4779-4a0a-a566-021bb5c27b8f", "record_id": "flaws_cloudtrail:0000541:c168ffef-4779-4a0a-a566-021bb5c27b8f", "row_index": 541, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c168ffef-4779-4a0a-a566-021bb5c27b8f", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52a58f64-2db5-487e-b2f6-7cf92701e4", "record_id": "flaws_cloudtrail:0000542:52a58f64-2db5-487e-b2f6-7cf92701e4", "row_index": 542, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52a58f64-2db5-487e-b2f6-7cf92701e4", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db83f701-c7ad-4cbc-8007-127da284acde", "record_id": "flaws_cloudtrail:0000543:db83f701-c7ad-4cbc-8007-127da284acde", "row_index": 543, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeLaunchConfigurations", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db83f701-c7ad-4cbc-8007-127da284acde", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeLaunchConfigurations", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd14cfac-add6-468f-8ac7-5a7c4967ee30", "record_id": "flaws_cloudtrail:0000544:bd14cfac-add6-468f-8ac7-5a7c4967ee30", "row_index": 544, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd14cfac-add6-468f-8ac7-5a7c4967ee30", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17106a-9ac6-4686-a148-729ffa1392a4", "record_id": "flaws_cloudtrail:0000545:17106a-9ac6-4686-a148-729ffa1392a4", "row_index": 545, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17106a-9ac6-4686-a148-729ffa1392a4", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb0150c8-2cc9-4322-a41a-e6e8a29d1841", "record_id": "flaws_cloudtrail:0000546:fb0150c8-2cc9-4322-a41a-e6e8a29d1841", "row_index": 546, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb0150c8-2cc9-4322-a41a-e6e8a29d1841", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bfc7324-2bdd-4cf0-b9d1-bd04e9035c4c", "record_id": "flaws_cloudtrail:0000547:2bfc7324-2bdd-4cf0-b9d1-bd04e9035c4c", "row_index": 547, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bfc7324-2bdd-4cf0-b9d1-bd04e9035c4c", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ca8fd59-0e46-4910-a487-78253f20eb9c", "record_id": "flaws_cloudtrail:0000548:8ca8fd59-0e46-4910-a487-78253f20eb9c", "row_index": 548, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ca8fd59-0e46-4910-a487-78253f20eb9c", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "413a5d3d-3788-4257-ad85-b35be068f1ff", "record_id": "flaws_cloudtrail:0000549:413a5d3d-3788-4257-ad85-b35be068f1ff", "row_index": 549, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeReservedInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "413a5d3d-3788-4257-ad85-b35be068f1ff", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeReservedInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"reservedInstancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "701038d-1d98-452c-afa0-5ba868dfe7f6", "record_id": "flaws_cloudtrail:0000550:701038d-1d98-452c-afa0-5ba868dfe7f6", "row_index": 550, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "701038d-1d98-452c-afa0-5ba868dfe7f6", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a8f29b4-da23-4b86-a67d-fdea2a9fcccf", "record_id": "flaws_cloudtrail:0000551:7a8f29b4-da23-4b86-a67d-fdea2a9fcccf", "row_index": 551, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a8f29b4-da23-4b86-a67d-fdea2a9fcccf", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aac52f29-f7da-4ee5-917d-1bee5e7febc9", "record_id": "flaws_cloudtrail:0000552:aac52f29-f7da-4ee5-917d-1bee5e7febc9", "row_index": 552, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeTags", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aac52f29-f7da-4ee5-917d-1bee5e7febc9", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeTags", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff1ce4a0-bcd9-4589-81d0-8a43c396c7c9", "record_id": "flaws_cloudtrail:0000553:ff1ce4a0-bcd9-4589-81d0-8a43c396c7c9", "row_index": 553, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff1ce4a0-bcd9-4589-81d0-8a43c396c7c9", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40e28f76-a746-4502-9122-acb5973f8b30", "record_id": "flaws_cloudtrail:0000554:40e28f76-a746-4502-9122-acb5973f8b30", "row_index": 554, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40e28f76-a746-4502-9122-acb5973f8b30", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c4a6f1b-cde5-4198-b1ec-0b257edacf8b", "record_id": "flaws_cloudtrail:0000555:9c4a6f1b-cde5-4198-b1ec-0b257edacf8b", "row_index": 555, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeScheduledActions", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c4a6f1b-cde5-4198-b1ec-0b257edacf8b", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeScheduledActions", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 50}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fa8b50b-5d22-4c2f-bde2-8c6cd830405e", "record_id": "flaws_cloudtrail:0000556:3fa8b50b-5d22-4c2f-bde2-8c6cd830405e", "row_index": 556, "timestamp": "2017-05-26T21:44:03Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fa8b50b-5d22-4c2f-bde2-8c6cd830405e", "eventTime": "2017-05-26T21:44:03Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad7ab31e-6e8b-4d74-9987-7868ca574278e", "record_id": "flaws_cloudtrail:0000557:ad7ab31e-6e8b-4d74-9987-7868ca574278e", "row_index": 557, "timestamp": "2017-05-26T21:44:04Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad7ab31e-6e8b-4d74-9987-7868ca574278e", "eventTime": "2017-05-26T21:44:04Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb155a76-815b-449e-94b6-c183fc04bc65", "record_id": "flaws_cloudtrail:0000558:cb155a76-815b-449e-94b6-c183fc04bc65", "row_index": 558, "timestamp": "2017-05-26T21:44:04Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb155a76-815b-449e-94b6-c183fc04bc65", "eventTime": "2017-05-26T21:44:04Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3eb1c72-a794-4d1a-9a0d-bc42c30634e1", "record_id": "flaws_cloudtrail:0000559:a3eb1c72-a794-4d1a-9a0d-bc42c30634e1", "row_index": 559, "timestamp": "2017-05-26T21:44:04Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3eb1c72-a794-4d1a-9a0d-bc42c30634e1", "eventTime": "2017-05-26T21:44:04Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b40a688d-a94c-4a57-a0ea-c3102b9771c1", "record_id": "flaws_cloudtrail:0000560:b40a688d-a94c-4a57-a0ea-c3102b9771c1", "row_index": 560, "timestamp": "2017-05-26T21:44:04Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b40a688d-a94c-4a57-a0ea-c3102b9771c1", "eventTime": "2017-05-26T21:44:04Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ce8497c-ba1a-4768-a620-9d67ec3365f5", "record_id": "flaws_cloudtrail:0000561:1ce8497c-ba1a-4768-a620-9d67ec3365f5", "row_index": 561, "timestamp": "2017-05-26T21:44:04Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ce8497c-ba1a-4768-a620-9d67ec3365f5", "eventTime": "2017-05-26T21:44:04Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e18c9a1-f1a5-4c47-862a-9e5b7294e9db", "record_id": "flaws_cloudtrail:0000562:4e18c9a1-f1a5-4c47-862a-9e5b7294e9db", "row_index": 562, "timestamp": "2017-05-26T21:44:04Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e18c9a1-f1a5-4c47-862a-9e5b7294e9db", "eventTime": "2017-05-26T21:44:04Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "420d46c9-4720-4933-8e20-84b9f2a87f24", "record_id": "flaws_cloudtrail:0000563:420d46c9-4720-4933-8e20-84b9f2a87f24", "row_index": 563, "timestamp": "2017-05-26T21:44:04Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "420d46c9-4720-4933-8e20-84b9f2a87f24", "eventTime": "2017-05-26T21:44:04Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8698fdea-3889-488d-9648-f38d7912b16e", "record_id": "flaws_cloudtrail:0000564:8698fdea-3889-488d-9648-f38d7912b16e", "row_index": 564, "timestamp": "2017-05-26T21:44:04Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8698fdea-3889-488d-9648-f38d7912b16e", "eventTime": "2017-05-26T21:44:04Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-4e23caa8-1f82-45b5-9068-3200fb1a0c7a", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f1ee7fb-50a1-4914-9865-9a5fd9d5a61e", "record_id": "flaws_cloudtrail:0000565:7f1ee7fb-50a1-4914-9865-9a5fd9d5a61e", "row_index": 565, "timestamp": "2017-05-26T21:44:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f1ee7fb-50a1-4914-9865-9a5fd9d5a61e", "eventTime": "2017-05-26T21:44:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33c45c68-56ae-4e0d-b6f7-6dd9f297007", "record_id": "flaws_cloudtrail:0000566:33c45c68-56ae-4e0d-b6f7-6dd9f297007", "row_index": 566, "timestamp": "2017-05-26T21:44:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33c45c68-56ae-4e0d-b6f7-6dd9f297007", "eventTime": "2017-05-26T21:44:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3", "versionId": "v10"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70a54e4c-3ddb-4f9b-91e7-1b76e877636ca", "record_id": "flaws_cloudtrail:0000567:70a54e4c-3ddb-4f9b-91e7-1b76e877636ca", "row_index": 567, "timestamp": "2017-05-26T21:44:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70a54e4c-3ddb-4f9b-91e7-1b76e877636ca", "eventTime": "2017-05-26T21:44:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSDirectConnectReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1241f4e8-4b7f-4cbf-9ac7-b6ea32d97547", "record_id": "flaws_cloudtrail:0000568:1241f4e8-4b7f-4cbf-9ac7-b6ea32d97547", "row_index": 568, "timestamp": "2017-05-26T21:44:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1241f4e8-4b7f-4cbf-9ac7-b6ea32d97547", "eventTime": "2017-05-26T21:44:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "064613c9-2da9-449f-bfd2-f02a7a44b7f3", "record_id": "flaws_cloudtrail:0000569:064613c9-2da9-449f-bfd2-f02a7a44b7f3", "row_index": 569, "timestamp": "2017-05-26T21:44:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "064613c9-2da9-449f-bfd2-f02a7a44b7f3", "eventTime": "2017-05-26T21:44:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSMarketplaceFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73cf2a60-d160-4810-b5db-a55636858fb3", "record_id": "flaws_cloudtrail:0000570:73cf2a60-d160-4810-b5db-a55636858fb3", "row_index": 570, "timestamp": "2017-05-26T21:44:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73cf2a60-d160-4810-b5db-a55636858fb3", "eventTime": "2017-05-26T21:44:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AutoScalingConsoleReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58d6105e-c768-4f28-b91a-202222f089c7", "record_id": "flaws_cloudtrail:0000571:58d6105e-c768-4f28-b91a-202222f089c7", "row_index": 571, "timestamp": "2017-05-26T21:44:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58d6105e-c768-4f28-b91a-202222f089c7", "eventTime": "2017-05-26T21:44:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonGlacierReadOnlyAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ceb3cd40-ca0e-4e27-97e7-3f293183b35e2", "record_id": "flaws_cloudtrail:0000572:ceb3cd40-ca0e-4e27-97e7-3f293183b35e2", "row_index": 572, "timestamp": "2017-05-26T21:44:07Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ceb3cd40-ca0e-4e27-97e7-3f293183b35e2", "eventTime": "2017-05-26T21:44:07Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSQuickSightListIAM", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27f71a75-2dc8-403d-8da4-05af855a8ff5", "record_id": "flaws_cloudtrail:0000573:27f71a75-2dc8-403d-8da4-05af855a8ff5", "row_index": 573, "timestamp": "2017-05-26T21:44:07Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27f71a75-2dc8-403d-8da4-05af855a8ff5", "eventTime": "2017-05-26T21:44:07Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonDMSRedshiftS3Role", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96ce9a02-fbfd-4f17-a3e0-7e935366f1ef", "record_id": "flaws_cloudtrail:0000574:96ce9a02-fbfd-4f17-a3e0-7e935366f1ef", "row_index": 574, "timestamp": "2017-05-26T21:44:08Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96ce9a02-fbfd-4f17-a3e0-7e935366f1ef", "eventTime": "2017-05-26T21:44:08Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSHealthFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ae29fa4-3401-42f1-b1f1-aba95f9ced63", "record_id": "flaws_cloudtrail:0000575:8ae29fa4-3401-42f1-b1f1-aba95f9ced63", "row_index": 575, "timestamp": "2017-05-26T21:44:08Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ae29fa4-3401-42f1-b1f1-aba95f9ced63", "eventTime": "2017-05-26T21:44:08Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonRDSFullAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05a2fbfe-002e-482a-bd9c-a232a0b3b45d", "record_id": "flaws_cloudtrail:0000576:05a2fbfe-002e-482a-bd9c-a232a0b3b45d", "row_index": 576, "timestamp": "2017-05-26T21:44:08Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05a2fbfe-002e-482a-bd9c-a232a0b3b45d", "eventTime": "2017-05-26T21:44:08Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/job-function/SupportUser", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e16e0b1-4136-4cc2-91c4-53d24efebf48", "record_id": "flaws_cloudtrail:0000577:3e16e0b1-4136-4cc2-91c4-53d24efebf48", "row_index": 577, "timestamp": "2017-05-26T21:44:09Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e16e0b1-4136-4cc2-91c4-53d24efebf48", "eventTime": "2017-05-26T21:44:09Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCertificateManagerReadOnly", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40408a5-7cf6-49aa-9c29-d24d044b2549", "record_id": "flaws_cloudtrail:0000578:40408a5-7cf6-49aa-9c29-d24d044b2549", "row_index": 578, "timestamp": "2017-05-26T21:44:09Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40408a5-7cf6-49aa-9c29-d24d044b2549", "eventTime": "2017-05-26T21:44:09Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSElasticBeanstalkReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b0024b7-d8cc-4a9a-9149-2faa189c177a", "record_id": "flaws_cloudtrail:0000579:7b0024b7-d8cc-4a9a-9149-2faa189c177a", "row_index": 579, "timestamp": "2017-05-26T21:44:09Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b0024b7-d8cc-4a9a-9149-2faa189c177a", "eventTime": "2017-05-26T21:44:09Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonEC2FullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c795f4cc-e8d6-4e0e-9af4-e76b811fc5ba", "record_id": "flaws_cloudtrail:0000580:c795f4cc-e8d6-4e0e-9af4-e76b811fc5ba", "row_index": 580, "timestamp": "2017-05-26T21:44:10Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c795f4cc-e8d6-4e0e-9af4-e76b811fc5ba", "eventTime": "2017-05-26T21:44:10Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCodeCommitPowerUser", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6f8059a-d2a0-41f5-b91d-9faf4f641123", "record_id": "flaws_cloudtrail:0000581:e6f8059a-d2a0-41f5-b91d-9faf4f641123", "row_index": 581, "timestamp": "2017-05-26T21:44:10Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6f8059a-d2a0-41f5-b91d-9faf4f641123", "eventTime": "2017-05-26T21:44:10Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSQuicksightAthenaAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b03e1c87-a9d7-4f52-a87e-e957d499820f", "record_id": "flaws_cloudtrail:0000582:b03e1c87-a9d7-4f52-a87e-e957d499820f", "row_index": 582, "timestamp": "2017-05-26T21:44:10Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b03e1c87-a9d7-4f52-a87e-e957d499820f", "eventTime": "2017-05-26T21:44:10Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCodeCommitFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9a792cd-de5d-4859-85d6-4e29d737b416", "record_id": "flaws_cloudtrail:0000583:d9a792cd-de5d-4859-85d6-4e29d737b416", "row_index": 583, "timestamp": "2017-05-26T21:44:11Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9a792cd-de5d-4859-85d6-4e29d737b416", "eventTime": "2017-05-26T21:44:11Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonSQSFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88e76c0c-9c08-4fe9-be32-099609fe3110d", "record_id": "flaws_cloudtrail:0000584:88e76c0c-9c08-4fe9-be32-099609fe3110d", "row_index": 584, "timestamp": "2017-05-26T21:44:11Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88e76c0c-9c08-4fe9-be32-099609fe3110d", "eventTime": "2017-05-26T21:44:11Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/IAMSelfManageServiceSpecificCredentials", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9d339ca-8176-419a-9467-66d5472ee9d5", "record_id": "flaws_cloudtrail:0000585:f9d339ca-8176-419a-9467-66d5472ee9d5", "row_index": 585, "timestamp": "2017-05-26T21:44:11Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9d339ca-8176-419a-9467-66d5472ee9d5", "eventTime": "2017-05-26T21:44:11Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df24223-5162-4d7c-b6ae-d85aabe04b8c", "record_id": "flaws_cloudtrail:0000586:df24223-5162-4d7c-b6ae-d85aabe04b8c", "row_index": 586, "timestamp": "2017-05-26T21:44:12Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df24223-5162-4d7c-b6ae-d85aabe04b8c", "eventTime": "2017-05-26T21:44:12Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforSSM", "versionId": "v3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d9c6e00-3235-4eda-ac62-cc6aa5198e12", "record_id": "flaws_cloudtrail:0000587:2d9c6e00-3235-4eda-ac62-cc6aa5198e12", "row_index": 587, "timestamp": "2017-05-26T21:44:12Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d9c6e00-3235-4eda-ac62-cc6aa5198e12", "eventTime": "2017-05-26T21:44:12Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSIoTLogging", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d610133-fd89-4544-8c2d-ab9db08ea6c4", "record_id": "flaws_cloudtrail:0000588:d610133-fd89-4544-8c2d-ab9db08ea6c4", "row_index": 588, "timestamp": "2017-05-26T21:44:12Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d610133-fd89-4544-8c2d-ab9db08ea6c4", "eventTime": "2017-05-26T21:44:12Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSLambdaFullAccess", "versionId": "v7"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b6104e9-2615-488b-b5f0-659715c440e4f", "record_id": "flaws_cloudtrail:0000589:4b6104e9-2615-488b-b5f0-659715c440e4f", "row_index": 589, "timestamp": "2017-05-26T21:44:13Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b6104e9-2615-488b-b5f0-659715c440e4f", "eventTime": "2017-05-26T21:44:13Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSCloudHSMRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65b68b23-96f7-40c5-be2f-aecc8dadb180", "record_id": "flaws_cloudtrail:0000590:65b68b23-96f7-40c5-be2f-aecc8dadb180", "row_index": 590, "timestamp": "2017-05-26T21:44:13Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65b68b23-96f7-40c5-be2f-aecc8dadb180", "eventTime": "2017-05-26T21:44:13Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/IAMFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6e1d21a-2991-4e9f-bc79-49c678abe3f1", "record_id": "flaws_cloudtrail:0000591:e6e1d21a-2991-4e9f-bc79-49c678abe3f1", "row_index": 591, "timestamp": "2017-05-26T21:44:14Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6e1d21a-2991-4e9f-bc79-49c678abe3f1", "eventTime": "2017-05-26T21:44:14Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSAgentlessDiscoveryService", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07a14cad-48e2-4413-adf3-57052cf7cd78", "record_id": "flaws_cloudtrail:0000592:07a14cad-48e2-4413-adf3-57052cf7cd78", "row_index": 592, "timestamp": "2017-05-26T21:44:14Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07a14cad-48e2-4413-adf3-57052cf7cd78", "eventTime": "2017-05-26T21:44:14Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonElastiCacheFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d8890a2-0262-44d4-a025-7c114c082877", "record_id": "flaws_cloudtrail:0000593:8d8890a2-0262-44d4-a025-7c114c082877", "row_index": 593, "timestamp": "2017-05-26T21:44:14Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d8890a2-0262-44d4-a025-7c114c082877", "eventTime": "2017-05-26T21:44:14Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonInspectorFullAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f5eda6f-9341-4d4a-ba9a-059feb1abc12", "record_id": "flaws_cloudtrail:0000594:8f5eda6f-9341-4d4a-ba9a-059feb1abc12", "row_index": 594, "timestamp": "2017-05-26T21:44:15Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f5eda6f-9341-4d4a-ba9a-059feb1abc12", "eventTime": "2017-05-26T21:44:15Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSXrayWriteOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6e256c8-5afa-47ae-adbe-00217a945305", "record_id": "flaws_cloudtrail:0000595:b6e256c8-5afa-47ae-adbe-00217a945305", "row_index": 595, "timestamp": "2017-05-26T21:44:15Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6e256c8-5afa-47ae-adbe-00217a945305", "eventTime": "2017-05-26T21:44:15Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AutoScalingReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f04b257e-3f7e-4e11-a4f4-9b3debaf9946", "record_id": "flaws_cloudtrail:0000596:f04b257e-3f7e-4e11-a4f4-9b3debaf9946", "row_index": 596, "timestamp": "2017-05-26T21:44:16Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f04b257e-3f7e-4e11-a4f4-9b3debaf9946", "eventTime": "2017-05-26T21:44:16Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforAWSCodeDeploy", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a815be9-6be4-4a0d-a166-a649493bac967", "record_id": "flaws_cloudtrail:0000597:8a815be9-6be4-4a0d-a166-a649493bac967", "row_index": 597, "timestamp": "2017-05-26T21:44:16Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a815be9-6be4-4a0d-a166-a649493bac967", "eventTime": "2017-05-26T21:44:16Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AutoScalingFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6c207734-cf66-47e8-998b-02c4217abfc6", "record_id": "flaws_cloudtrail:0000598:c6c207734-cf66-47e8-998b-02c4217abfc6", "row_index": 598, "timestamp": "2017-05-26T21:44:17Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6c207734-cf66-47e8-998b-02c4217abfc6", "eventTime": "2017-05-26T21:44:17Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/CloudWatchEventsBuiltInTargetExecutionAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1df60ad-228d-4d35-bf73-c4473cac669a", "record_id": "flaws_cloudtrail:0000599:f1df60ad-228d-4d35-bf73-c4473cac669a", "row_index": 599, "timestamp": "2017-05-26T21:44:17Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1df60ad-228d-4d35-bf73-c4473cac669a", "eventTime": "2017-05-26T21:44:17Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSMobileHub_ReadOnly", "versionId": "v6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a065a78-a7af-46fd-8690-780324c7", "record_id": "flaws_cloudtrail:0000600:3a065a78-a7af-46fd-8690-780324c7", "row_index": 600, "timestamp": "2017-05-26T21:44:18Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a065a78-a7af-46fd-8690-780324c7", "eventTime": "2017-05-26T21:44:18Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonCloudDirectoryReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4fa7354-1715-4b69-8fd5-533b34db6a14", "record_id": "flaws_cloudtrail:0000601:c4fa7354-1715-4b69-8fd5-533b34db6a14", "row_index": 601, "timestamp": "2017-05-26T21:44:18Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4fa7354-1715-4b69-8fd5-533b34db6a14", "eventTime": "2017-05-26T21:44:18Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSOpsWorksFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2c113590-0839-4f2c-98fd-79fabdb0f6de", "record_id": "flaws_cloudtrail:0000602:b2c113590-0839-4f2c-98fd-79fabdb0f6de", "row_index": 602, "timestamp": "2017-05-26T21:44:19Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2c113590-0839-4f2c-98fd-79fabdb0f6de", "eventTime": "2017-05-26T21:44:19Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSCodePipelineApproverAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93272ae7-3053-49fd-bcfe-c888bd5383f9", "record_id": "flaws_cloudtrail:0000603:93272ae7-3053-49fd-bcfe-c888bd5383f9", "row_index": 603, "timestamp": "2017-05-26T21:44:19Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93272ae7-3053-49fd-bcfe-c888bd5383f9", "eventTime": "2017-05-26T21:44:19Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSOpsWorksCMInstanceProfileRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4d0ea11-9524-40b2-9158-b898f1b80d79", "record_id": "flaws_cloudtrail:0000604:a4d0ea11-9524-40b2-9158-b898f1b80d79", "row_index": 604, "timestamp": "2017-05-26T21:44:20Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4d0ea11-9524-40b2-9158-b898f1b80d79", "eventTime": "2017-05-26T21:44:20Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AWSApplicationDiscoveryAgentAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bb132fd-77d6-4f7c-b29f-02bda9b9ffe3", "record_id": "flaws_cloudtrail:0000605:1bb132fd-77d6-4f7c-b29f-02bda9b9ffe3", "row_index": 605, "timestamp": "2017-05-26T21:44:21Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bb132fd-77d6-4f7c-b29f-02bda9b9ffe3", "eventTime": "2017-05-26T21:44:21Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AmazonElasticMapReduceRole", "versionId": "v7"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20ee3759-fd20-4973-8ff2-d7f8b89ff8c9", "record_id": "flaws_cloudtrail:0000606:20ee3759-fd20-4973-8ff2-d7f8b89ff8c9", "row_index": 606, "timestamp": "2017-05-26T21:44:21Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20ee3759-fd20-4973-8ff2-d7f8b89ff8c9", "eventTime": "2017-05-26T21:44:21Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/job-function/ViewOnlyAccess", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f155055-e649-48b1-a147-fb147f5b8c63", "record_id": "flaws_cloudtrail:0000607:7f155055-e649-48b1-a147-fb147f5b8c63", "row_index": 607, "timestamp": "2017-05-26T21:44:22Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f155055-e649-48b1-a147-fb147f5b8c63", "eventTime": "2017-05-26T21:44:22Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonRoute53DomainsReadOnlyAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd2327b8-c961-457b-a594-62499abeb", "record_id": "flaws_cloudtrail:0000608:bd2327b8-c961-457b-a594-62499abeb", "row_index": 608, "timestamp": "2017-05-26T21:44:22Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd2327b8-c961-457b-a594-62499abeb", "eventTime": "2017-05-26T21:44:22Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/ApplicationAutoScalingForAmazonAppStreamAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70a0cb34-ac3a-42d3-845a-d9aa6d2767fc", "record_id": "flaws_cloudtrail:0000609:70a0cb34-ac3a-42d3-845a-d9aa6d2767fc", "row_index": 609, "timestamp": "2017-05-26T21:44:22Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70a0cb34-ac3a-42d3-845a-d9aa6d2767fc", "eventTime": "2017-05-26T21:44:22Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSOpsWorksRole", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b058d59-c3e6-4de9-80c6-df213e8702ef", "record_id": "flaws_cloudtrail:0000610:9b058d59-c3e6-4de9-80c6-df213e8702ef", "row_index": 610, "timestamp": "2017-05-26T21:44:23Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b058d59-c3e6-4de9-80c6-df213e8702ef", "eventTime": "2017-05-26T21:44:23Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryFullAccess", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74f09828-46b0-4ad1-92ee-562a6710811a", "record_id": "flaws_cloudtrail:0000611:74f09828-46b0-4ad1-92ee-562a6710811a", "row_index": 611, "timestamp": "2017-05-26T21:44:23Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74f09828-46b0-4ad1-92ee-562a6710811a", "eventTime": "2017-05-26T21:44:23Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "aws-sdk-java/1.11.60 Linux/4.4.0-78-generic Java_HotSpot(TM)_64-Bit_Server_VM/25.131-b11/1.8.0_131", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SimpleWorkflowFullAccess", "versionId": "v1"}, "resources": []}}