Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM credential appears to have been reused from an unfamiliar client, with a brief identity check followed by broad account discovery and a privileged change. Identify the responsible principal, the MITRE ATT&CK technique that best fits the activity, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "955f8247-7c41-48a4-9500-43ae63e22aef", "record_id": "flaws_cloudtrail:0000000:955f8247-7c41-48a4-9500-43ae63e22aef", "row_index": 0, "timestamp": "2019-08-20T13:55:12Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "955f8247-7c41-48a4-9500-43ae63e22aef", "eventTime": "2019-08-20T13:55:12Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07be524d-0c5d-47ac-a411-c0f333716ad03", "record_id": "flaws_cloudtrail:0000001:07be524d-0c5d-47ac-a411-c0f333716ad03", "row_index": 1, "timestamp": "2019-08-20T13:55:13Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07be524d-0c5d-47ac-a411-c0f333716ad03", "eventTime": "2019-08-20T13:55:13Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07be524d-0c5d-47ac-a411-c0f333716ad03", "record_id": "flaws_cloudtrail:0000002:07be524d-0c5d-47ac-a411-c0f333716ad03", "row_index": 2, "timestamp": "2019-08-20T13:55:13Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07be524d-0c5d-47ac-a411-c0f333716ad03", "eventTime": "2019-08-20T13:55:13Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "337da884-822f-4c36-b6b3-7403e01b8afc", "record_id": "flaws_cloudtrail:0000003:337da884-822f-4c36-b6b3-7403e01b8afc", "row_index": 3, "timestamp": "2019-08-20T13:55:14Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "337da884-822f-4c36-b6b3-7403e01b8afc", "eventTime": "2019-08-20T13:55:14Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "337da884-822f-4c36-b6b3-7403e01b8afc", "record_id": "flaws_cloudtrail:0000004:337da884-822f-4c36-b6b3-7403e01b8afc", "row_index": 4, "timestamp": "2019-08-20T13:55:14Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "337da884-822f-4c36-b6b3-7403e01b8afc", "eventTime": "2019-08-20T13:55:14Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d0589b2-3e34-46bd-98f5-8143ea9274fe", "record_id": "flaws_cloudtrail:0000005:7d0589b2-3e34-46bd-98f5-8143ea9274fe", "row_index": 5, "timestamp": "2019-08-20T13:55:15Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d0589b2-3e34-46bd-98f5-8143ea9274fe", "eventTime": "2019-08-20T13:55:15Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d0589b2-3e34-46bd-98f5-8143ea9274fe", "record_id": "flaws_cloudtrail:0000006:7d0589b2-3e34-46bd-98f5-8143ea9274fe", "row_index": 6, "timestamp": "2019-08-20T13:55:15Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d0589b2-3e34-46bd-98f5-8143ea9274fe", "eventTime": "2019-08-20T13:55:15Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0171dc11-63a9-4c1f-93e3-7dd1d4eb863a", "record_id": "flaws_cloudtrail:0000007:0171dc11-63a9-4c1f-93e3-7dd1d4eb863a", "row_index": 7, "timestamp": "2019-08-20T13:55:16Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0171dc11-63a9-4c1f-93e3-7dd1d4eb863a", "eventTime": "2019-08-20T13:55:16Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "468c1151-c5c6-4b63-a94f-5e9852f688d4", "record_id": "flaws_cloudtrail:0000008:468c1151-c5c6-4b63-a94f-5e9852f688d4", "row_index": 8, "timestamp": "2019-08-20T13:55:16Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "468c1151-c5c6-4b63-a94f-5e9852f688d4", "eventTime": "2019-08-20T13:55:16Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0171dc11-63a9-4c1f-93e3-7dd1d4eb863a", "record_id": "flaws_cloudtrail:0000009:0171dc11-63a9-4c1f-93e3-7dd1d4eb863a", "row_index": 9, "timestamp": "2019-08-20T13:55:16Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0171dc11-63a9-4c1f-93e3-7dd1d4eb863a", "eventTime": "2019-08-20T13:55:16Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "468c1151-c5c6-4b63-a94f-5e9852f688d4", "record_id": "flaws_cloudtrail:0000010:468c1151-c5c6-4b63-a94f-5e9852f688d4", "row_index": 10, "timestamp": "2019-08-20T13:55:16Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "468c1151-c5c6-4b63-a94f-5e9852f688d4", "eventTime": "2019-08-20T13:55:16Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e8c9db8-e2c7-4968-a590-ab7034ed2ca7", "record_id": "flaws_cloudtrail:0000011:7e8c9db8-e2c7-4968-a590-ab7034ed2ca7", "row_index": 11, "timestamp": "2019-08-20T13:55:17Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e8c9db8-e2c7-4968-a590-ab7034ed2ca7", "eventTime": "2019-08-20T13:55:17Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eed30956-7ebb-43a3-817e-f791c280eda5", "record_id": "flaws_cloudtrail:0000012:eed30956-7ebb-43a3-817e-f791c280eda5", "row_index": 12, "timestamp": "2019-08-20T13:55:17Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eed30956-7ebb-43a3-817e-f791c280eda5", "eventTime": "2019-08-20T13:55:17Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e8c9db8-e2c7-4968-a590-ab7034ed2ca7", "record_id": "flaws_cloudtrail:0000013:7e8c9db8-e2c7-4968-a590-ab7034ed2ca7", "row_index": 13, "timestamp": "2019-08-20T13:55:17Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e8c9db8-e2c7-4968-a590-ab7034ed2ca7", "eventTime": "2019-08-20T13:55:17Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eed30956-7ebb-43a3-817e-f791c280eda5", "record_id": "flaws_cloudtrail:0000014:eed30956-7ebb-43a3-817e-f791c280eda5", "row_index": 14, "timestamp": "2019-08-20T13:55:17Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eed30956-7ebb-43a3-817e-f791c280eda5", "eventTime": "2019-08-20T13:55:17Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf4db55d-090f-4b40-9536-7ea87b21ec2e", "record_id": "flaws_cloudtrail:0000015:cf4db55d-090f-4b40-9536-7ea87b21ec2e", "row_index": 15, "timestamp": "2019-08-20T13:55:18Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf4db55d-090f-4b40-9536-7ea87b21ec2e", "eventTime": "2019-08-20T13:55:18Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f96f1b9-00cf-4f73-9e4d-1ba055ad20a6", "record_id": "flaws_cloudtrail:0000016:7f96f1b9-00cf-4f73-9e4d-1ba055ad20a6", "row_index": 16, "timestamp": "2019-08-20T13:55:18Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f96f1b9-00cf-4f73-9e4d-1ba055ad20a6", "eventTime": "2019-08-20T13:55:18Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf4db55d-090f-4b40-9536-7ea87b21ec2e", "record_id": "flaws_cloudtrail:0000017:cf4db55d-090f-4b40-9536-7ea87b21ec2e", "row_index": 17, "timestamp": "2019-08-20T13:55:18Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf4db55d-090f-4b40-9536-7ea87b21ec2e", "eventTime": "2019-08-20T13:55:18Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f96f1b9-00cf-4f73-9e4d-1ba055ad20a6", "record_id": "flaws_cloudtrail:0000018:7f96f1b9-00cf-4f73-9e4d-1ba055ad20a6", "row_index": 18, "timestamp": "2019-08-20T13:55:18Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f96f1b9-00cf-4f73-9e4d-1ba055ad20a6", "eventTime": "2019-08-20T13:55:18Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b14749-3a94-4022-a4c2-54cc6269dcb2", "record_id": "flaws_cloudtrail:0000019:1b14749-3a94-4022-a4c2-54cc6269dcb2", "row_index": 19, "timestamp": "2019-08-20T13:55:19Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b14749-3a94-4022-a4c2-54cc6269dcb2", "eventTime": "2019-08-20T13:55:19Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73e3ac54-8455-48b8-8887-69bea064812", "record_id": "flaws_cloudtrail:0000020:73e3ac54-8455-48b8-8887-69bea064812", "row_index": 20, "timestamp": "2019-08-20T13:55:19Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73e3ac54-8455-48b8-8887-69bea064812", "eventTime": "2019-08-20T13:55:19Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b32f9cf1-e870-4d11-9b8e-783014eb3da9", "record_id": "flaws_cloudtrail:0000021:b32f9cf1-e870-4d11-9b8e-783014eb3da9", "row_index": 21, "timestamp": "2019-08-20T13:55:19Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b32f9cf1-e870-4d11-9b8e-783014eb3da9", "eventTime": "2019-08-20T13:55:19Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc4d82bb-511a-44d3-bff1-d00cb4b596b9", "record_id": "flaws_cloudtrail:0000022:fc4d82bb-511a-44d3-bff1-d00cb4b596b9", "row_index": 22, "timestamp": "2019-08-20T13:55:19Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc4d82bb-511a-44d3-bff1-d00cb4b596b9", "eventTime": "2019-08-20T13:55:19Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b14749-3a94-4022-a4c2-54cc6269dcb2", "record_id": "flaws_cloudtrail:0000023:1b14749-3a94-4022-a4c2-54cc6269dcb2", "row_index": 23, "timestamp": "2019-08-20T13:55:19Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b14749-3a94-4022-a4c2-54cc6269dcb2", "eventTime": "2019-08-20T13:55:19Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73e3ac54-8455-48b8-8887-69bea064812", "record_id": "flaws_cloudtrail:0000024:73e3ac54-8455-48b8-8887-69bea064812", "row_index": 24, "timestamp": "2019-08-20T13:55:19Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73e3ac54-8455-48b8-8887-69bea064812", "eventTime": "2019-08-20T13:55:19Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b32f9cf1-e870-4d11-9b8e-783014eb3da9", "record_id": "flaws_cloudtrail:0000025:b32f9cf1-e870-4d11-9b8e-783014eb3da9", "row_index": 25, "timestamp": "2019-08-20T13:55:19Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b32f9cf1-e870-4d11-9b8e-783014eb3da9", "eventTime": "2019-08-20T13:55:19Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc4d82bb-511a-44d3-bff1-d00cb4b596b9", "record_id": "flaws_cloudtrail:0000026:fc4d82bb-511a-44d3-bff1-d00cb4b596b9", "row_index": 26, "timestamp": "2019-08-20T13:55:19Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc4d82bb-511a-44d3-bff1-d00cb4b596b9", "eventTime": "2019-08-20T13:55:19Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c6916eb-0695-4379-a023-79418f7dec2", "record_id": "flaws_cloudtrail:0000027:5c6916eb-0695-4379-a023-79418f7dec2", "row_index": 27, "timestamp": "2019-08-20T13:55:20Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c6916eb-0695-4379-a023-79418f7dec2", "eventTime": "2019-08-20T13:55:20Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c6916eb-0695-4379-a023-79418f7dec2", "record_id": "flaws_cloudtrail:0000028:5c6916eb-0695-4379-a023-79418f7dec2", "row_index": 28, "timestamp": "2019-08-20T13:55:20Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c6916eb-0695-4379-a023-79418f7dec2", "eventTime": "2019-08-20T13:55:20Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd99fe8d-78b4-47b3-af66-781fc4200e98", "record_id": "flaws_cloudtrail:0000029:dd99fe8d-78b4-47b3-af66-781fc4200e98", "row_index": 29, "timestamp": "2019-08-20T13:55:21Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd99fe8d-78b4-47b3-af66-781fc4200e98", "eventTime": "2019-08-20T13:55:21Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd99fe8d-78b4-47b3-af66-781fc4200e98", "record_id": "flaws_cloudtrail:0000030:dd99fe8d-78b4-47b3-af66-781fc4200e98", "row_index": 30, "timestamp": "2019-08-20T13:55:21Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd99fe8d-78b4-47b3-af66-781fc4200e98", "eventTime": "2019-08-20T13:55:21Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c6aa773-c56e-4100-9d61-5d7ee2321a90", "record_id": "flaws_cloudtrail:0000031:5c6aa773-c56e-4100-9d61-5d7ee2321a90", "row_index": 31, "timestamp": "2019-08-20T13:55:22Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c6aa773-c56e-4100-9d61-5d7ee2321a90", "eventTime": "2019-08-20T13:55:22Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c6aa773-c56e-4100-9d61-5d7ee2321a90", "record_id": "flaws_cloudtrail:0000032:5c6aa773-c56e-4100-9d61-5d7ee2321a90", "row_index": 32, "timestamp": "2019-08-20T13:55:22Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c6aa773-c56e-4100-9d61-5d7ee2321a90", "eventTime": "2019-08-20T13:55:22Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1a92eac-6cac-448a-b532-a49dd0e5a3df", "record_id": "flaws_cloudtrail:0000033:f1a92eac-6cac-448a-b532-a49dd0e5a3df", "row_index": 33, "timestamp": "2019-08-20T13:55:23Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1a92eac-6cac-448a-b532-a49dd0e5a3df", "eventTime": "2019-08-20T13:55:23Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "233d0e3e-a8e0-491a-b2c1-d37316a01c21", "record_id": "flaws_cloudtrail:0000034:233d0e3e-a8e0-491a-b2c1-d37316a01c21", "row_index": 34, "timestamp": "2019-08-20T13:55:23Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "233d0e3e-a8e0-491a-b2c1-d37316a01c21", "eventTime": "2019-08-20T13:55:23Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1a92eac-6cac-448a-b532-a49dd0e5a3df", "record_id": "flaws_cloudtrail:0000035:f1a92eac-6cac-448a-b532-a49dd0e5a3df", "row_index": 35, "timestamp": "2019-08-20T13:55:23Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1a92eac-6cac-448a-b532-a49dd0e5a3df", "eventTime": "2019-08-20T13:55:23Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "233d0e3e-a8e0-491a-b2c1-d37316a01c21", "record_id": "flaws_cloudtrail:0000036:233d0e3e-a8e0-491a-b2c1-d37316a01c21", "row_index": 36, "timestamp": "2019-08-20T13:55:23Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "233d0e3e-a8e0-491a-b2c1-d37316a01c21", "eventTime": "2019-08-20T13:55:23Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4526cdff-6e96-48a6-87ef-3e6f363aca90", "record_id": "flaws_cloudtrail:0000037:4526cdff-6e96-48a6-87ef-3e6f363aca90", "row_index": 37, "timestamp": "2019-08-20T13:55:24Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4526cdff-6e96-48a6-87ef-3e6f363aca90", "eventTime": "2019-08-20T13:55:24Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4526cdff-6e96-48a6-87ef-3e6f363aca90", "record_id": "flaws_cloudtrail:0000038:4526cdff-6e96-48a6-87ef-3e6f363aca90", "row_index": 38, "timestamp": "2019-08-20T13:55:24Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4526cdff-6e96-48a6-87ef-3e6f363aca90", "eventTime": "2019-08-20T13:55:24Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14586b4e-b9b5-4d80-b4cb-1fb1e0c0c67e", "record_id": "flaws_cloudtrail:0000039:14586b4e-b9b5-4d80-b4cb-1fb1e0c0c67e", "row_index": 39, "timestamp": "2019-08-20T13:55:25Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14586b4e-b9b5-4d80-b4cb-1fb1e0c0c67e", "eventTime": "2019-08-20T13:55:25Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14586b4e-b9b5-4d80-b4cb-1fb1e0c0c67e", "record_id": "flaws_cloudtrail:0000040:14586b4e-b9b5-4d80-b4cb-1fb1e0c0c67e", "row_index": 40, "timestamp": "2019-08-20T13:55:25Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14586b4e-b9b5-4d80-b4cb-1fb1e0c0c67e", "eventTime": "2019-08-20T13:55:25Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f638681-f957-4ea6-98fc-8e3fe025e050", "record_id": "flaws_cloudtrail:0000041:8f638681-f957-4ea6-98fc-8e3fe025e050", "row_index": 41, "timestamp": "2019-08-20T13:55:26Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f638681-f957-4ea6-98fc-8e3fe025e050", "eventTime": "2019-08-20T13:55:26Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13fb894f-2633-4a86-a1a2-866e97e3cf9f", "record_id": "flaws_cloudtrail:0000042:13fb894f-2633-4a86-a1a2-866e97e3cf9f", "row_index": 42, "timestamp": "2019-08-20T13:55:26Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13fb894f-2633-4a86-a1a2-866e97e3cf9f", "eventTime": "2019-08-20T13:55:26Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f638681-f957-4ea6-98fc-8e3fe025e050", "record_id": "flaws_cloudtrail:0000043:8f638681-f957-4ea6-98fc-8e3fe025e050", "row_index": 43, "timestamp": "2019-08-20T13:55:26Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f638681-f957-4ea6-98fc-8e3fe025e050", "eventTime": "2019-08-20T13:55:26Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13fb894f-2633-4a86-a1a2-866e97e3cf9f", "record_id": "flaws_cloudtrail:0000044:13fb894f-2633-4a86-a1a2-866e97e3cf9f", "row_index": 44, "timestamp": "2019-08-20T13:55:26Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13fb894f-2633-4a86-a1a2-866e97e3cf9f", "eventTime": "2019-08-20T13:55:26Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b55ea774-d5df-48a2-ae31-91a524013d52", "record_id": "flaws_cloudtrail:0000045:b55ea774-d5df-48a2-ae31-91a524013d52", "row_index": 45, "timestamp": "2019-08-20T13:55:27Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b55ea774-d5df-48a2-ae31-91a524013d52", "eventTime": "2019-08-20T13:55:27Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "003bf31a-349e-4094-809a-3cdfa3960b2c", "record_id": "flaws_cloudtrail:0000046:003bf31a-349e-4094-809a-3cdfa3960b2c", "row_index": 46, "timestamp": "2019-08-20T13:55:27Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "003bf31a-349e-4094-809a-3cdfa3960b2c", "eventTime": "2019-08-20T13:55:27Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b55ea774-d5df-48a2-ae31-91a524013d52", "record_id": "flaws_cloudtrail:0000047:b55ea774-d5df-48a2-ae31-91a524013d52", "row_index": 47, "timestamp": "2019-08-20T13:55:27Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b55ea774-d5df-48a2-ae31-91a524013d52", "eventTime": "2019-08-20T13:55:27Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "003bf31a-349e-4094-809a-3cdfa3960b2c", "record_id": "flaws_cloudtrail:0000048:003bf31a-349e-4094-809a-3cdfa3960b2c", "row_index": 48, "timestamp": "2019-08-20T13:55:27Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "003bf31a-349e-4094-809a-3cdfa3960b2c", "eventTime": "2019-08-20T13:55:27Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2480d2b8-204d-4d59-99af-004ba894c997", "record_id": "flaws_cloudtrail:0000049:2480d2b8-204d-4d59-99af-004ba894c997", "row_index": 49, "timestamp": "2019-08-20T13:55:28Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2480d2b8-204d-4d59-99af-004ba894c997", "eventTime": "2019-08-20T13:55:28Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2480d2b8-204d-4d59-99af-004ba894c997", "record_id": "flaws_cloudtrail:0000050:2480d2b8-204d-4d59-99af-004ba894c997", "row_index": 50, "timestamp": "2019-08-20T13:55:28Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2480d2b8-204d-4d59-99af-004ba894c997", "eventTime": "2019-08-20T13:55:28Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82996fc-9174-4d48-8c23-df6767d281bb", "record_id": "flaws_cloudtrail:0000051:82996fc-9174-4d48-8c23-df6767d281bb", "row_index": 51, "timestamp": "2019-08-20T13:55:29Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82996fc-9174-4d48-8c23-df6767d281bb", "eventTime": "2019-08-20T13:55:29Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:ap-south-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b9a22bc-4705-4897-81fb-3b6638ac5044", "record_id": "flaws_cloudtrail:0000052:1b9a22bc-4705-4897-81fb-3b6638ac5044", "row_index": 52, "timestamp": "2019-08-20T13:55:29Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b9a22bc-4705-4897-81fb-3b6638ac5044", "eventTime": "2019-08-20T13:55:29Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:eu-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8778e38a-aa5f-464b-ac0a-39b917f08b42", "record_id": "flaws_cloudtrail:0000053:8778e38a-aa5f-464b-ac0a-39b917f08b42", "row_index": 53, "timestamp": "2019-08-20T13:55:29Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8778e38a-aa5f-464b-ac0a-39b917f08b42", "eventTime": "2019-08-20T13:55:29Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:eu-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bae6b9e6-4639-4bab-9fe0-105774669972", "record_id": "flaws_cloudtrail:0000054:bae6b9e6-4639-4bab-9fe0-105774669972", "row_index": 54, "timestamp": "2019-08-20T13:55:29Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bae6b9e6-4639-4bab-9fe0-105774669972", "eventTime": "2019-08-20T13:55:29Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:eu-west-3:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82996fc-9174-4d48-8c23-df6767d281bb", "record_id": "flaws_cloudtrail:0000055:82996fc-9174-4d48-8c23-df6767d281bb", "row_index": 55, "timestamp": "2019-08-20T13:55:29Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82996fc-9174-4d48-8c23-df6767d281bb", "eventTime": "2019-08-20T13:55:29Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:ap-south-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b9a22bc-4705-4897-81fb-3b6638ac5044", "record_id": "flaws_cloudtrail:0000056:1b9a22bc-4705-4897-81fb-3b6638ac5044", "row_index": 56, "timestamp": "2019-08-20T13:55:29Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b9a22bc-4705-4897-81fb-3b6638ac5044", "eventTime": "2019-08-20T13:55:29Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:eu-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8778e38a-aa5f-464b-ac0a-39b917f08b42", "record_id": "flaws_cloudtrail:0000057:8778e38a-aa5f-464b-ac0a-39b917f08b42", "row_index": 57, "timestamp": "2019-08-20T13:55:29Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8778e38a-aa5f-464b-ac0a-39b917f08b42", "eventTime": "2019-08-20T13:55:29Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:eu-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bae6b9e6-4639-4bab-9fe0-105774669972", "record_id": "flaws_cloudtrail:0000058:bae6b9e6-4639-4bab-9fe0-105774669972", "row_index": 58, "timestamp": "2019-08-20T13:55:29Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bae6b9e6-4639-4bab-9fe0-105774669972", "eventTime": "2019-08-20T13:55:29Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:eu-west-3:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "856cdfc7-fc9c-4869-897c-e33be56c4981", "record_id": "flaws_cloudtrail:0000059:856cdfc7-fc9c-4869-897c-e33be56c4981", "row_index": 59, "timestamp": "2019-08-20T13:55:31Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "856cdfc7-fc9c-4869-897c-e33be56c4981", "eventTime": "2019-08-20T13:55:31Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:ap-northeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "856cdfc7-fc9c-4869-897c-e33be56c4981", "record_id": "flaws_cloudtrail:0000060:856cdfc7-fc9c-4869-897c-e33be56c4981", "row_index": 60, "timestamp": "2019-08-20T13:55:31Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "856cdfc7-fc9c-4869-897c-e33be56c4981", "eventTime": "2019-08-20T13:55:31Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:ap-northeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97502c0-1596-49a7-ad63-30a10e5358b5", "record_id": "flaws_cloudtrail:0000061:97502c0-1596-49a7-ad63-30a10e5358b5", "row_index": 61, "timestamp": "2019-08-20T13:55:32Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97502c0-1596-49a7-ad63-30a10e5358b5", "eventTime": "2019-08-20T13:55:32Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:ap-northeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97502c0-1596-49a7-ad63-30a10e5358b5", "record_id": "flaws_cloudtrail:0000062:97502c0-1596-49a7-ad63-30a10e5358b5", "row_index": 62, "timestamp": "2019-08-20T13:55:32Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97502c0-1596-49a7-ad63-30a10e5358b5", "eventTime": "2019-08-20T13:55:32Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:ap-northeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "277fffb5-4248-4872-b98c-8caa156286fd", "record_id": "flaws_cloudtrail:0000063:277fffb5-4248-4872-b98c-8caa156286fd", "row_index": 63, "timestamp": "2019-08-20T13:55:33Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "277fffb5-4248-4872-b98c-8caa156286fd", "eventTime": "2019-08-20T13:55:33Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:ca-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "277fffb5-4248-4872-b98c-8caa156286fd", "record_id": "flaws_cloudtrail:0000064:277fffb5-4248-4872-b98c-8caa156286fd", "row_index": 64, "timestamp": "2019-08-20T13:55:33Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "277fffb5-4248-4872-b98c-8caa156286fd", "eventTime": "2019-08-20T13:55:33Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:ca-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e46dd44-c23c-4dbc-86cf-57a7cb04448c", "record_id": "flaws_cloudtrail:0000065:1e46dd44-c23c-4dbc-86cf-57a7cb04448c", "row_index": 65, "timestamp": "2019-08-20T13:55:34Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e46dd44-c23c-4dbc-86cf-57a7cb04448c", "eventTime": "2019-08-20T13:55:34Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:ap-southeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e46dd44-c23c-4dbc-86cf-57a7cb04448c", "record_id": "flaws_cloudtrail:0000066:1e46dd44-c23c-4dbc-86cf-57a7cb04448c", "row_index": 66, "timestamp": "2019-08-20T13:55:34Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e46dd44-c23c-4dbc-86cf-57a7cb04448c", "eventTime": "2019-08-20T13:55:34Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:ap-southeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66355a9-e0c7-4068-9cae-f1ca4e130a5e", "record_id": "flaws_cloudtrail:0000067:66355a9-e0c7-4068-9cae-f1ca4e130a5e", "row_index": 67, "timestamp": "2019-08-20T13:55:36Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66355a9-e0c7-4068-9cae-f1ca4e130a5e", "eventTime": "2019-08-20T13:55:36Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:ap-southeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21d9b91d-8c54-4105-a22f-5fdbf40b094b", "record_id": "flaws_cloudtrail:0000068:21d9b91d-8c54-4105-a22f-5fdbf40b094b", "row_index": 68, "timestamp": "2019-08-20T13:55:36Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21d9b91d-8c54-4105-a22f-5fdbf40b094b", "eventTime": "2019-08-20T13:55:36Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:eu-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66355a9-e0c7-4068-9cae-f1ca4e130a5e", "record_id": "flaws_cloudtrail:0000069:66355a9-e0c7-4068-9cae-f1ca4e130a5e", "row_index": 69, "timestamp": "2019-08-20T13:55:36Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66355a9-e0c7-4068-9cae-f1ca4e130a5e", "eventTime": "2019-08-20T13:55:36Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:ap-southeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21d9b91d-8c54-4105-a22f-5fdbf40b094b", "record_id": "flaws_cloudtrail:0000070:21d9b91d-8c54-4105-a22f-5fdbf40b094b", "row_index": 70, "timestamp": "2019-08-20T13:55:36Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21d9b91d-8c54-4105-a22f-5fdbf40b094b", "eventTime": "2019-08-20T13:55:36Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:eu-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4abca783-e8b9-432b-ba20-84ea7af889eb", "record_id": "flaws_cloudtrail:0000071:4abca783-e8b9-432b-ba20-84ea7af889eb", "row_index": 71, "timestamp": "2019-08-20T13:55:37Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4abca783-e8b9-432b-ba20-84ea7af889eb", "eventTime": "2019-08-20T13:55:37Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c43e0d94-a966-47d5-b409-5683e02e2bde", "record_id": "flaws_cloudtrail:0000072:c43e0d94-a966-47d5-b409-5683e02e2bde", "row_index": 72, "timestamp": "2019-08-20T13:55:37Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c43e0d94-a966-47d5-b409-5683e02e2bde", "eventTime": "2019-08-20T13:55:37Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:us-east-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4abca783-e8b9-432b-ba20-84ea7af889eb", "record_id": "flaws_cloudtrail:0000073:4abca783-e8b9-432b-ba20-84ea7af889eb", "row_index": 73, "timestamp": "2019-08-20T13:55:37Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4abca783-e8b9-432b-ba20-84ea7af889eb", "eventTime": "2019-08-20T13:55:37Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c43e0d94-a966-47d5-b409-5683e02e2bde", "record_id": "flaws_cloudtrail:0000074:c43e0d94-a966-47d5-b409-5683e02e2bde", "row_index": 74, "timestamp": "2019-08-20T13:55:37Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c43e0d94-a966-47d5-b409-5683e02e2bde", "eventTime": "2019-08-20T13:55:37Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:us-east-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3a6295a-8652-45cb-a0a1-f40743d51f3d", "record_id": "flaws_cloudtrail:0000075:a3a6295a-8652-45cb-a0a1-f40743d51f3d", "row_index": 75, "timestamp": "2019-08-20T13:55:38Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3a6295a-8652-45cb-a0a1-f40743d51f3d", "eventTime": "2019-08-20T13:55:38Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3a6295a-8652-45cb-a0a1-f40743d51f3d", "record_id": "flaws_cloudtrail:0000076:a3a6295a-8652-45cb-a0a1-f40743d51f3d", "row_index": 76, "timestamp": "2019-08-20T13:55:38Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3a6295a-8652-45cb-a0a1-f40743d51f3d", "eventTime": "2019-08-20T13:55:38Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances on resource: arn:aws:lightsail:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b408968c-ad17-483a-bfd0-dd09bd610bd0", "record_id": "flaws_cloudtrail:0000077:b408968c-ad17-483a-bfd0-dd09bd610bd0", "row_index": 77, "timestamp": "2019-08-20T13:55:39Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b408968c-ad17-483a-bfd0-dd09bd610bd0", "eventTime": "2019-08-20T13:55:39Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:ap-south-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3977d333-0a32-415c-ae70-98abfbbf44ed", "record_id": "flaws_cloudtrail:0000078:3977d333-0a32-415c-ae70-98abfbbf44ed", "row_index": 78, "timestamp": "2019-08-20T13:55:39Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3977d333-0a32-415c-ae70-98abfbbf44ed", "eventTime": "2019-08-20T13:55:39Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:eu-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4a6ec28-0270-4175-8824-f89b2dd217f7", "record_id": "flaws_cloudtrail:0000079:b4a6ec28-0270-4175-8824-f89b2dd217f7", "row_index": 79, "timestamp": "2019-08-20T13:55:39Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4a6ec28-0270-4175-8824-f89b2dd217f7", "eventTime": "2019-08-20T13:55:39Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:eu-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05785-01a2-4ea6-ae0c-087b55f6b213", "record_id": "flaws_cloudtrail:0000080:05785-01a2-4ea6-ae0c-087b55f6b213", "row_index": 80, "timestamp": "2019-08-20T13:55:39Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05785-01a2-4ea6-ae0c-087b55f6b213", "eventTime": "2019-08-20T13:55:39Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:eu-west-3:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b408968c-ad17-483a-bfd0-dd09bd610bd0", "record_id": "flaws_cloudtrail:0000081:b408968c-ad17-483a-bfd0-dd09bd610bd0", "row_index": 81, "timestamp": "2019-08-20T13:55:39Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b408968c-ad17-483a-bfd0-dd09bd610bd0", "eventTime": "2019-08-20T13:55:39Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:ap-south-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3977d333-0a32-415c-ae70-98abfbbf44ed", "record_id": "flaws_cloudtrail:0000082:3977d333-0a32-415c-ae70-98abfbbf44ed", "row_index": 82, "timestamp": "2019-08-20T13:55:39Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3977d333-0a32-415c-ae70-98abfbbf44ed", "eventTime": "2019-08-20T13:55:39Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:eu-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4a6ec28-0270-4175-8824-f89b2dd217f7", "record_id": "flaws_cloudtrail:0000083:b4a6ec28-0270-4175-8824-f89b2dd217f7", "row_index": 83, "timestamp": "2019-08-20T13:55:39Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4a6ec28-0270-4175-8824-f89b2dd217f7", "eventTime": "2019-08-20T13:55:39Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:eu-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05785-01a2-4ea6-ae0c-087b55f6b213", "record_id": "flaws_cloudtrail:0000084:05785-01a2-4ea6-ae0c-087b55f6b213", "row_index": 84, "timestamp": "2019-08-20T13:55:39Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05785-01a2-4ea6-ae0c-087b55f6b213", "eventTime": "2019-08-20T13:55:39Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:eu-west-3:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d46d12cf-73d4-49fc-a6b1-d5703ca76bee", "record_id": "flaws_cloudtrail:0000085:d46d12cf-73d4-49fc-a6b1-d5703ca76bee", "row_index": 85, "timestamp": "2019-08-20T13:55:40Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d46d12cf-73d4-49fc-a6b1-d5703ca76bee", "eventTime": "2019-08-20T13:55:40Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:ap-northeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d46d12cf-73d4-49fc-a6b1-d5703ca76bee", "record_id": "flaws_cloudtrail:0000086:d46d12cf-73d4-49fc-a6b1-d5703ca76bee", "row_index": 86, "timestamp": "2019-08-20T13:55:40Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d46d12cf-73d4-49fc-a6b1-d5703ca76bee", "eventTime": "2019-08-20T13:55:40Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:ap-northeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf4f435a-c3c8-4978-a662-0f3b34a0752f", "record_id": "flaws_cloudtrail:0000087:cf4f435a-c3c8-4978-a662-0f3b34a0752f", "row_index": 87, "timestamp": "2019-08-20T13:55:41Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf4f435a-c3c8-4978-a662-0f3b34a0752f", "eventTime": "2019-08-20T13:55:41Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:ap-northeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf4f435a-c3c8-4978-a662-0f3b34a0752f", "record_id": "flaws_cloudtrail:0000088:cf4f435a-c3c8-4978-a662-0f3b34a0752f", "row_index": 88, "timestamp": "2019-08-20T13:55:41Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf4f435a-c3c8-4978-a662-0f3b34a0752f", "eventTime": "2019-08-20T13:55:41Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:ap-northeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "339c2ab7-73b8-43f3-b2e0-6295cf0b4dd9", "record_id": "flaws_cloudtrail:0000089:339c2ab7-73b8-43f3-b2e0-6295cf0b4dd9", "row_index": 89, "timestamp": "2019-08-20T13:55:42Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "339c2ab7-73b8-43f3-b2e0-6295cf0b4dd9", "eventTime": "2019-08-20T13:55:42Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:ca-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "339c2ab7-73b8-43f3-b2e0-6295cf0b4dd9", "record_id": "flaws_cloudtrail:0000090:339c2ab7-73b8-43f3-b2e0-6295cf0b4dd9", "row_index": 90, "timestamp": "2019-08-20T13:55:42Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "339c2ab7-73b8-43f3-b2e0-6295cf0b4dd9", "eventTime": "2019-08-20T13:55:42Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:ca-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9d3bae4-cf27-4c14-839f-c5a904bd7cac", "record_id": "flaws_cloudtrail:0000091:d9d3bae4-cf27-4c14-839f-c5a904bd7cac", "row_index": 91, "timestamp": "2019-08-20T13:55:43Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9d3bae4-cf27-4c14-839f-c5a904bd7cac", "eventTime": "2019-08-20T13:55:43Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:ap-southeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9d3bae4-cf27-4c14-839f-c5a904bd7cac", "record_id": "flaws_cloudtrail:0000092:d9d3bae4-cf27-4c14-839f-c5a904bd7cac", "row_index": 92, "timestamp": "2019-08-20T13:55:43Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9d3bae4-cf27-4c14-839f-c5a904bd7cac", "eventTime": "2019-08-20T13:55:43Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:ap-southeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a79af81e-807f-4214-9392-181457fdac3", "record_id": "flaws_cloudtrail:0000093:a79af81e-807f-4214-9392-181457fdac3", "row_index": 93, "timestamp": "2019-08-20T13:55:44Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a79af81e-807f-4214-9392-181457fdac3", "eventTime": "2019-08-20T13:55:44Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:ap-southeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "933171-0ba8-4c25-9ef5-15b170377f5", "record_id": "flaws_cloudtrail:0000094:933171-0ba8-4c25-9ef5-15b170377f5", "row_index": 94, "timestamp": "2019-08-20T13:55:44Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 887, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "933171-0ba8-4c25-9ef5-15b170377f5", "eventTime": "2019-08-20T13:55:44Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:eu-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eac6580e-6672-443a-ad58-76202bd087", "record_id": "flaws_cloudtrail:0000095:eac6580e-6672-443a-ad58-76202bd087", "row_index": 95, "timestamp": "2019-08-20T13:55:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eac6580e-6672-443a-ad58-76202bd087", "eventTime": "2019-08-20T13:55:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a79af81e-807f-4214-9392-181457fdac3", "record_id": "flaws_cloudtrail:0000096:a79af81e-807f-4214-9392-181457fdac3", "row_index": 96, "timestamp": "2019-08-20T13:55:44Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a79af81e-807f-4214-9392-181457fdac3", "eventTime": "2019-08-20T13:55:44Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:ap-southeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "933171-0ba8-4c25-9ef5-15b170377f5", "record_id": "flaws_cloudtrail:0000097:933171-0ba8-4c25-9ef5-15b170377f5", "row_index": 97, "timestamp": "2019-08-20T13:55:44Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 887, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "933171-0ba8-4c25-9ef5-15b170377f5", "eventTime": "2019-08-20T13:55:44Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:eu-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eac6580e-6672-443a-ad58-76202bd087", "record_id": "flaws_cloudtrail:0000098:eac6580e-6672-443a-ad58-76202bd087", "row_index": 98, "timestamp": "2019-08-20T13:55:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eac6580e-6672-443a-ad58-76202bd087", "eventTime": "2019-08-20T13:55:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f29c9bc-db2d-4ba2-8a19-3365e51fce41", "record_id": "flaws_cloudtrail:0000099:7f29c9bc-db2d-4ba2-8a19-3365e51fce41", "row_index": 99, "timestamp": "2019-08-20T13:55:45Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f29c9bc-db2d-4ba2-8a19-3365e51fce41", "eventTime": "2019-08-20T13:55:45Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d15ad3b-eb8b-4255-8792-3e235487c27", "record_id": "flaws_cloudtrail:0000100:5d15ad3b-eb8b-4255-8792-3e235487c27", "row_index": 100, "timestamp": "2019-08-20T13:55:45Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d15ad3b-eb8b-4255-8792-3e235487c27", "eventTime": "2019-08-20T13:55:45Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:us-east-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f29c9bc-db2d-4ba2-8a19-3365e51fce41", "record_id": "flaws_cloudtrail:0000101:7f29c9bc-db2d-4ba2-8a19-3365e51fce41", "row_index": 101, "timestamp": "2019-08-20T13:55:45Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f29c9bc-db2d-4ba2-8a19-3365e51fce41", "eventTime": "2019-08-20T13:55:45Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d15ad3b-eb8b-4255-8792-3e235487c27", "record_id": "flaws_cloudtrail:0000102:5d15ad3b-eb8b-4255-8792-3e235487c27", "row_index": 102, "timestamp": "2019-08-20T13:55:45Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d15ad3b-eb8b-4255-8792-3e235487c27", "eventTime": "2019-08-20T13:55:45Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:us-east-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "526a150c-2f30-4743-bdbe-3073ea76ea10", "record_id": "flaws_cloudtrail:0000103:526a150c-2f30-4743-bdbe-3073ea76ea10", "row_index": 103, "timestamp": "2019-08-20T13:55:46Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "526a150c-2f30-4743-bdbe-3073ea76ea10", "eventTime": "2019-08-20T13:55:46Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-north-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a86ffa9-d307-474b-a245-4e55a2cc8e7b", "record_id": "flaws_cloudtrail:0000104:7a86ffa9-d307-474b-a245-4e55a2cc8e7b", "row_index": 104, "timestamp": "2019-08-20T13:55:46Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a86ffa9-d307-474b-a245-4e55a2cc8e7b", "eventTime": "2019-08-20T13:55:46Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "526a150c-2f30-4743-bdbe-3073ea76ea10", "record_id": "flaws_cloudtrail:0000105:526a150c-2f30-4743-bdbe-3073ea76ea10", "row_index": 105, "timestamp": "2019-08-20T13:55:46Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "526a150c-2f30-4743-bdbe-3073ea76ea10", "eventTime": "2019-08-20T13:55:46Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-north-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a86ffa9-d307-474b-a245-4e55a2cc8e7b", "record_id": "flaws_cloudtrail:0000106:7a86ffa9-d307-474b-a245-4e55a2cc8e7b", "row_index": 106, "timestamp": "2019-08-20T13:55:46Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a86ffa9-d307-474b-a245-4e55a2cc8e7b", "eventTime": "2019-08-20T13:55:46Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetLoadBalancers on resource: arn:aws:lightsail:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d45a6b0f-ae0d-4512-b041-f28ee361ab2a", "record_id": "flaws_cloudtrail:0000107:d45a6b0f-ae0d-4512-b041-f28ee361ab2a", "row_index": 107, "timestamp": "2019-08-20T13:55:47Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d45a6b0f-ae0d-4512-b041-f28ee361ab2a", "eventTime": "2019-08-20T13:55:47Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-south-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ffb69ae-1320-4ada-ab6e-0bd773f4d950", "record_id": "flaws_cloudtrail:0000108:7ffb69ae-1320-4ada-ab6e-0bd773f4d950", "row_index": 108, "timestamp": "2019-08-20T13:55:47Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ffb69ae-1320-4ada-ab6e-0bd773f4d950", "eventTime": "2019-08-20T13:55:47Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-west-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d732aa51-e0aa-47be-832b-d7b334731f76", "record_id": "flaws_cloudtrail:0000109:d732aa51-e0aa-47be-832b-d7b334731f76", "row_index": 109, "timestamp": "2019-08-20T13:55:47Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d732aa51-e0aa-47be-832b-d7b334731f76", "eventTime": "2019-08-20T13:55:47Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70b221c0-9374-4fb7-95f5-38cb7c439245", "record_id": "flaws_cloudtrail:0000110:70b221c0-9374-4fb7-95f5-38cb7c439245", "row_index": 110, "timestamp": "2019-08-20T13:55:47Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70b221c0-9374-4fb7-95f5-38cb7c439245", "eventTime": "2019-08-20T13:55:47Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-west-3::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d45a6b0f-ae0d-4512-b041-f28ee361ab2a", "record_id": "flaws_cloudtrail:0000111:d45a6b0f-ae0d-4512-b041-f28ee361ab2a", "row_index": 111, "timestamp": "2019-08-20T13:55:47Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d45a6b0f-ae0d-4512-b041-f28ee361ab2a", "eventTime": "2019-08-20T13:55:47Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-south-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ffb69ae-1320-4ada-ab6e-0bd773f4d950", "record_id": "flaws_cloudtrail:0000112:7ffb69ae-1320-4ada-ab6e-0bd773f4d950", "row_index": 112, "timestamp": "2019-08-20T13:55:47Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ffb69ae-1320-4ada-ab6e-0bd773f4d950", "eventTime": "2019-08-20T13:55:47Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-west-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d732aa51-e0aa-47be-832b-d7b334731f76", "record_id": "flaws_cloudtrail:0000113:d732aa51-e0aa-47be-832b-d7b334731f76", "row_index": 113, "timestamp": "2019-08-20T13:55:47Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d732aa51-e0aa-47be-832b-d7b334731f76", "eventTime": "2019-08-20T13:55:47Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70b221c0-9374-4fb7-95f5-38cb7c439245", "record_id": "flaws_cloudtrail:0000114:70b221c0-9374-4fb7-95f5-38cb7c439245", "row_index": 114, "timestamp": "2019-08-20T13:55:47Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70b221c0-9374-4fb7-95f5-38cb7c439245", "eventTime": "2019-08-20T13:55:47Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-west-3::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ccbdc68-d1c5-4e0d-bc50-9bd0ab569e83", "record_id": "flaws_cloudtrail:0000115:6ccbdc68-d1c5-4e0d-bc50-9bd0ab569e83", "row_index": 115, "timestamp": "2019-08-20T13:55:49Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ccbdc68-d1c5-4e0d-bc50-9bd0ab569e83", "eventTime": "2019-08-20T13:55:49Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-northeast-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ccbdc68-d1c5-4e0d-bc50-9bd0ab569e83", "record_id": "flaws_cloudtrail:0000116:6ccbdc68-d1c5-4e0d-bc50-9bd0ab569e83", "row_index": 116, "timestamp": "2019-08-20T13:55:49Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ccbdc68-d1c5-4e0d-bc50-9bd0ab569e83", "eventTime": "2019-08-20T13:55:49Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-northeast-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f9d7e8d-0865-40c8-936f-89f2c9452bfc", "record_id": "flaws_cloudtrail:0000117:4f9d7e8d-0865-40c8-936f-89f2c9452bfc", "row_index": 117, "timestamp": "2019-08-20T13:55:50Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f9d7e8d-0865-40c8-936f-89f2c9452bfc", "eventTime": "2019-08-20T13:55:50Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-northeast-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f9d7e8d-0865-40c8-936f-89f2c9452bfc", "record_id": "flaws_cloudtrail:0000118:4f9d7e8d-0865-40c8-936f-89f2c9452bfc", "row_index": 118, "timestamp": "2019-08-20T13:55:50Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f9d7e8d-0865-40c8-936f-89f2c9452bfc", "eventTime": "2019-08-20T13:55:50Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-northeast-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7913b962-5c54-4d44-b3e5-95d10b0c1092", "record_id": "flaws_cloudtrail:0000119:7913b962-5c54-4d44-b3e5-95d10b0c1092", "row_index": 119, "timestamp": "2019-08-20T13:55:51Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7913b962-5c54-4d44-b3e5-95d10b0c1092", "eventTime": "2019-08-20T13:55:51Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:sa-east-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7913b962-5c54-4d44-b3e5-95d10b0c1092", "record_id": "flaws_cloudtrail:0000120:7913b962-5c54-4d44-b3e5-95d10b0c1092", "row_index": 120, "timestamp": "2019-08-20T13:55:51Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7913b962-5c54-4d44-b3e5-95d10b0c1092", "eventTime": "2019-08-20T13:55:51Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:sa-east-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93f20635-add6-47e1-bcc4-3ee15fe555457", "record_id": "flaws_cloudtrail:0000121:93f20635-add6-47e1-bcc4-3ee15fe555457", "row_index": 121, "timestamp": "2019-08-20T13:55:52Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93f20635-add6-47e1-bcc4-3ee15fe555457", "eventTime": "2019-08-20T13:55:52Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-southeast-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7339adbc-4470-4848-8e70-d025cafed551", "record_id": "flaws_cloudtrail:0000122:7339adbc-4470-4848-8e70-d025cafed551", "row_index": 122, "timestamp": "2019-08-20T13:55:52Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 887, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7339adbc-4470-4848-8e70-d025cafed551", "eventTime": "2019-08-20T13:55:52Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ca-central-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93f20635-add6-47e1-bcc4-3ee15fe555457", "record_id": "flaws_cloudtrail:0000123:93f20635-add6-47e1-bcc4-3ee15fe555457", "row_index": 123, "timestamp": "2019-08-20T13:55:52Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93f20635-add6-47e1-bcc4-3ee15fe555457", "eventTime": "2019-08-20T13:55:52Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-southeast-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7339adbc-4470-4848-8e70-d025cafed551", "record_id": "flaws_cloudtrail:0000124:7339adbc-4470-4848-8e70-d025cafed551", "row_index": 124, "timestamp": "2019-08-20T13:55:52Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 887, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7339adbc-4470-4848-8e70-d025cafed551", "eventTime": "2019-08-20T13:55:52Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ca-central-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2d4e2f6-a3f2-429c-ad50-6f62105e66", "record_id": "flaws_cloudtrail:0000125:d2d4e2f6-a3f2-429c-ad50-6f62105e66", "row_index": 125, "timestamp": "2019-08-20T13:55:54Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2d4e2f6-a3f2-429c-ad50-6f62105e66", "eventTime": "2019-08-20T13:55:54Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-southeast-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cda2ad5-349b-49a8-a722-87e92e48a46b", "record_id": "flaws_cloudtrail:0000126:6cda2ad5-349b-49a8-a722-87e92e48a46b", "row_index": 126, "timestamp": "2019-08-20T13:55:54Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 887, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cda2ad5-349b-49a8-a722-87e92e48a46b", "eventTime": "2019-08-20T13:55:54Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-central-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2d4e2f6-a3f2-429c-ad50-6f62105e66", "record_id": "flaws_cloudtrail:0000127:d2d4e2f6-a3f2-429c-ad50-6f62105e66", "row_index": 127, "timestamp": "2019-08-20T13:55:54Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2d4e2f6-a3f2-429c-ad50-6f62105e66", "eventTime": "2019-08-20T13:55:54Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:ap-southeast-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cda2ad5-349b-49a8-a722-87e92e48a46b", "record_id": "flaws_cloudtrail:0000128:6cda2ad5-349b-49a8-a722-87e92e48a46b", "row_index": 128, "timestamp": "2019-08-20T13:55:54Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 887, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cda2ad5-349b-49a8-a722-87e92e48a46b", "eventTime": "2019-08-20T13:55:54Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-central-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5d6c952-5b78-489f-a337-98ac9d576df2", "record_id": "flaws_cloudtrail:0000129:a5d6c952-5b78-489f-a337-98ac9d576df2", "row_index": 129, "timestamp": "2019-08-20T13:55:55Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5d6c952-5b78-489f-a337-98ac9d576df2", "eventTime": "2019-08-20T13:55:55Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-east-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52adc48d-6c79-4425-ae2b-680875ceb7f9", "record_id": "flaws_cloudtrail:0000130:52adc48d-6c79-4425-ae2b-680875ceb7f9", "row_index": 130, "timestamp": "2019-08-20T13:55:55Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52adc48d-6c79-4425-ae2b-680875ceb7f9", "eventTime": "2019-08-20T13:55:55Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-east-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5d6c952-5b78-489f-a337-98ac9d576df2", "record_id": "flaws_cloudtrail:0000131:a5d6c952-5b78-489f-a337-98ac9d576df2", "row_index": 131, "timestamp": "2019-08-20T13:55:55Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5d6c952-5b78-489f-a337-98ac9d576df2", "eventTime": "2019-08-20T13:55:55Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-east-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52adc48d-6c79-4425-ae2b-680875ceb7f9", "record_id": "flaws_cloudtrail:0000132:52adc48d-6c79-4425-ae2b-680875ceb7f9", "row_index": 132, "timestamp": "2019-08-20T13:55:55Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52adc48d-6c79-4425-ae2b-680875ceb7f9", "eventTime": "2019-08-20T13:55:55Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-east-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf4fef7a-aeb6-4526-b872-449a96159ea", "record_id": "flaws_cloudtrail:0000133:bf4fef7a-aeb6-4526-b872-449a96159ea", "row_index": 133, "timestamp": "2019-08-20T13:55:56Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf4fef7a-aeb6-4526-b872-449a96159ea", "eventTime": "2019-08-20T13:55:56Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf4fef7a-aeb6-4526-b872-449a96159ea", "record_id": "flaws_cloudtrail:0000134:bf4fef7a-aeb6-4526-b872-449a96159ea", "row_index": 134, "timestamp": "2019-08-20T13:55:56Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf4fef7a-aeb6-4526-b872-449a96159ea", "eventTime": "2019-08-20T13:55:56Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd290a50-3945-410b-880c-5776ae9d6c53", "record_id": "flaws_cloudtrail:0000135:fd290a50-3945-410b-880c-5776ae9d6c53", "row_index": 135, "timestamp": "2019-08-20T13:55:57Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd290a50-3945-410b-880c-5776ae9d6c53", "eventTime": "2019-08-20T13:55:57Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "955ef805-0345-4059-b977-869f1ec55dd9", "record_id": "flaws_cloudtrail:0000136:955ef805-0345-4059-b977-869f1ec55dd9", "row_index": 136, "timestamp": "2019-08-20T13:55:57Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "955ef805-0345-4059-b977-869f1ec55dd9", "eventTime": "2019-08-20T13:55:57Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd290a50-3945-410b-880c-5776ae9d6c53", "record_id": "flaws_cloudtrail:0000137:fd290a50-3945-410b-880c-5776ae9d6c53", "row_index": 137, "timestamp": "2019-08-20T13:55:57Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd290a50-3945-410b-880c-5776ae9d6c53", "eventTime": "2019-08-20T13:55:57Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "955ef805-0345-4059-b977-869f1ec55dd9", "record_id": "flaws_cloudtrail:0000138:955ef805-0345-4059-b977-869f1ec55dd9", "row_index": 138, "timestamp": "2019-08-20T13:55:57Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "955ef805-0345-4059-b977-869f1ec55dd9", "eventTime": "2019-08-20T13:55:57Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "982d04bf-211b-4e7a-83e6-0cf711c9873b", "record_id": "flaws_cloudtrail:0000139:982d04bf-211b-4e7a-83e6-0cf711c9873b", "row_index": 139, "timestamp": "2019-08-20T13:55:58Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "982d04bf-211b-4e7a-83e6-0cf711c9873b", "eventTime": "2019-08-20T13:55:58Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3866c7a1-18a1-4ff2-a555-b6dc848daa86", "record_id": "flaws_cloudtrail:0000140:3866c7a1-18a1-4ff2-a555-b6dc848daa86", "row_index": 140, "timestamp": "2019-08-20T13:55:58Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3866c7a1-18a1-4ff2-a555-b6dc848daa86", "eventTime": "2019-08-20T13:55:58Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66fc7d7a-3f62-4a41-b1d3-d5aa487eebb5", "record_id": "flaws_cloudtrail:0000141:66fc7d7a-3f62-4a41-b1d3-d5aa487eebb5", "row_index": 141, "timestamp": "2019-08-20T13:55:58Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66fc7d7a-3f62-4a41-b1d3-d5aa487eebb5", "eventTime": "2019-08-20T13:55:58Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce52a07a-70af-4931-ada7-2cc2876f3cc3", "record_id": "flaws_cloudtrail:0000142:ce52a07a-70af-4931-ada7-2cc2876f3cc3", "row_index": 142, "timestamp": "2019-08-20T13:55:58Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce52a07a-70af-4931-ada7-2cc2876f3cc3", "eventTime": "2019-08-20T13:55:58Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "982d04bf-211b-4e7a-83e6-0cf711c9873b", "record_id": "flaws_cloudtrail:0000143:982d04bf-211b-4e7a-83e6-0cf711c9873b", "row_index": 143, "timestamp": "2019-08-20T13:55:58Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "982d04bf-211b-4e7a-83e6-0cf711c9873b", "eventTime": "2019-08-20T13:55:58Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3866c7a1-18a1-4ff2-a555-b6dc848daa86", "record_id": "flaws_cloudtrail:0000144:3866c7a1-18a1-4ff2-a555-b6dc848daa86", "row_index": 144, "timestamp": "2019-08-20T13:55:58Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3866c7a1-18a1-4ff2-a555-b6dc848daa86", "eventTime": "2019-08-20T13:55:58Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66fc7d7a-3f62-4a41-b1d3-d5aa487eebb5", "record_id": "flaws_cloudtrail:0000145:66fc7d7a-3f62-4a41-b1d3-d5aa487eebb5", "row_index": 145, "timestamp": "2019-08-20T13:55:58Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66fc7d7a-3f62-4a41-b1d3-d5aa487eebb5", "eventTime": "2019-08-20T13:55:58Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce52a07a-70af-4931-ada7-2cc2876f3cc3", "record_id": "flaws_cloudtrail:0000146:ce52a07a-70af-4931-ada7-2cc2876f3cc3", "row_index": 146, "timestamp": "2019-08-20T13:55:58Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce52a07a-70af-4931-ada7-2cc2876f3cc3", "eventTime": "2019-08-20T13:55:58Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a460539a2-71ae-4152-8d0a-b65f60219019", "record_id": "flaws_cloudtrail:0000147:a460539a2-71ae-4152-8d0a-b65f60219019", "row_index": 147, "timestamp": "2019-08-20T13:55:59Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a460539a2-71ae-4152-8d0a-b65f60219019", "eventTime": "2019-08-20T13:55:59Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a460539a2-71ae-4152-8d0a-b65f60219019", "record_id": "flaws_cloudtrail:0000148:a460539a2-71ae-4152-8d0a-b65f60219019", "row_index": 148, "timestamp": "2019-08-20T13:55:59Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a460539a2-71ae-4152-8d0a-b65f60219019", "eventTime": "2019-08-20T13:55:59Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf44c0ad-01fa-4259-a9ec-f41b7a2b8e9e", "record_id": "flaws_cloudtrail:0000149:bf44c0ad-01fa-4259-a9ec-f41b7a2b8e9e", "row_index": 149, "timestamp": "2019-08-20T13:56:00Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf44c0ad-01fa-4259-a9ec-f41b7a2b8e9e", "eventTime": "2019-08-20T13:56:00Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf44c0ad-01fa-4259-a9ec-f41b7a2b8e9e", "record_id": "flaws_cloudtrail:0000150:bf44c0ad-01fa-4259-a9ec-f41b7a2b8e9e", "row_index": 150, "timestamp": "2019-08-20T13:56:00Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf44c0ad-01fa-4259-a9ec-f41b7a2b8e9e", "eventTime": "2019-08-20T13:56:00Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7807a0c4-21a6-468f-9f82-b1e809c2142b", "record_id": "flaws_cloudtrail:0000151:7807a0c4-21a6-468f-9f82-b1e809c2142b", "row_index": 151, "timestamp": "2019-08-20T13:56:01Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7807a0c4-21a6-468f-9f82-b1e809c2142b", "eventTime": "2019-08-20T13:56:01Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7807a0c4-21a6-468f-9f82-b1e809c2142b", "record_id": "flaws_cloudtrail:0000152:7807a0c4-21a6-468f-9f82-b1e809c2142b", "row_index": 152, "timestamp": "2019-08-20T13:56:01Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7807a0c4-21a6-468f-9f82-b1e809c2142b", "eventTime": "2019-08-20T13:56:01Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff770a09-e8d8-4a4d-b726-a311dd2bae8d", "record_id": "flaws_cloudtrail:0000153:ff770a09-e8d8-4a4d-b726-a311dd2bae8d", "row_index": 153, "timestamp": "2019-08-20T13:56:02Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff770a09-e8d8-4a4d-b726-a311dd2bae8d", "eventTime": "2019-08-20T13:56:02Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d296dc10-9750-4c8c-8291-1cdbe83946", "record_id": "flaws_cloudtrail:0000154:d296dc10-9750-4c8c-8291-1cdbe83946", "row_index": 154, "timestamp": "2019-08-20T13:56:02Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d296dc10-9750-4c8c-8291-1cdbe83946", "eventTime": "2019-08-20T13:56:02Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff770a09-e8d8-4a4d-b726-a311dd2bae8d", "record_id": "flaws_cloudtrail:0000155:ff770a09-e8d8-4a4d-b726-a311dd2bae8d", "row_index": 155, "timestamp": "2019-08-20T13:56:02Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff770a09-e8d8-4a4d-b726-a311dd2bae8d", "eventTime": "2019-08-20T13:56:02Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d296dc10-9750-4c8c-8291-1cdbe83946", "record_id": "flaws_cloudtrail:0000156:d296dc10-9750-4c8c-8291-1cdbe83946", "row_index": 156, "timestamp": "2019-08-20T13:56:02Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d296dc10-9750-4c8c-8291-1cdbe83946", "eventTime": "2019-08-20T13:56:02Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33b0cd99-d685-4df2-b863-88d150fc841d", "record_id": "flaws_cloudtrail:0000157:33b0cd99-d685-4df2-b863-88d150fc841d", "row_index": 157, "timestamp": "2019-08-20T13:56:03Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33b0cd99-d685-4df2-b863-88d150fc841d", "eventTime": "2019-08-20T13:56:03Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33b0cd99-d685-4df2-b863-88d150fc841d", "record_id": "flaws_cloudtrail:0000158:33b0cd99-d685-4df2-b863-88d150fc841d", "row_index": 158, "timestamp": "2019-08-20T13:56:03Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33b0cd99-d685-4df2-b863-88d150fc841d", "eventTime": "2019-08-20T13:56:03Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26b15a44-af24-47e5-8054-339a5560fbed", "record_id": "flaws_cloudtrail:0000159:26b15a44-af24-47e5-8054-339a5560fbed", "row_index": 159, "timestamp": "2019-08-20T13:56:04Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26b15a44-af24-47e5-8054-339a5560fbed", "eventTime": "2019-08-20T13:56:04Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcbdb065-7e72-4289-a851-e867369d0fe5", "record_id": "flaws_cloudtrail:0000160:fcbdb065-7e72-4289-a851-e867369d0fe5", "row_index": 160, "timestamp": "2019-08-20T13:56:04Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcbdb065-7e72-4289-a851-e867369d0fe5", "eventTime": "2019-08-20T13:56:04Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d09a24f-274d-4f93-8254-b5e03a916487", "record_id": "flaws_cloudtrail:0000161:3d09a24f-274d-4f93-8254-b5e03a916487", "row_index": 161, "timestamp": "2019-08-20T13:56:04Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d09a24f-274d-4f93-8254-b5e03a916487", "eventTime": "2019-08-20T13:56:04Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26b15a44-af24-47e5-8054-339a5560fbed", "record_id": "flaws_cloudtrail:0000162:26b15a44-af24-47e5-8054-339a5560fbed", "row_index": 162, "timestamp": "2019-08-20T13:56:04Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26b15a44-af24-47e5-8054-339a5560fbed", "eventTime": "2019-08-20T13:56:04Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcbdb065-7e72-4289-a851-e867369d0fe5", "record_id": "flaws_cloudtrail:0000163:fcbdb065-7e72-4289-a851-e867369d0fe5", "row_index": 163, "timestamp": "2019-08-20T13:56:04Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcbdb065-7e72-4289-a851-e867369d0fe5", "eventTime": "2019-08-20T13:56:04Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d09a24f-274d-4f93-8254-b5e03a916487", "record_id": "flaws_cloudtrail:0000164:3d09a24f-274d-4f93-8254-b5e03a916487", "row_index": 164, "timestamp": "2019-08-20T13:56:04Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d09a24f-274d-4f93-8254-b5e03a916487", "eventTime": "2019-08-20T13:56:04Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "527a1543-94fb-47f4-9044-0b76c716de07", "record_id": "flaws_cloudtrail:0000165:527a1543-94fb-47f4-9044-0b76c716de07", "row_index": 165, "timestamp": "2019-08-20T13:56:05Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "527a1543-94fb-47f4-9044-0b76c716de07", "eventTime": "2019-08-20T13:56:05Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11dc24bb-1fbb-408d-9539-373af8618ddf", "record_id": "flaws_cloudtrail:0000166:11dc24bb-1fbb-408d-9539-373af8618ddf", "row_index": 166, "timestamp": "2019-08-20T13:56:05Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11dc24bb-1fbb-408d-9539-373af8618ddf", "eventTime": "2019-08-20T13:56:05Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "527a1543-94fb-47f4-9044-0b76c716de07", "record_id": "flaws_cloudtrail:0000167:527a1543-94fb-47f4-9044-0b76c716de07", "row_index": 167, "timestamp": "2019-08-20T13:56:05Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "527a1543-94fb-47f4-9044-0b76c716de07", "eventTime": "2019-08-20T13:56:05Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11dc24bb-1fbb-408d-9539-373af8618ddf", "record_id": "flaws_cloudtrail:0000168:11dc24bb-1fbb-408d-9539-373af8618ddf", "row_index": 168, "timestamp": "2019-08-20T13:56:05Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11dc24bb-1fbb-408d-9539-373af8618ddf", "eventTime": "2019-08-20T13:56:05Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56b033335-77ed-453a-b0a8-0aa1f951fd5b", "record_id": "flaws_cloudtrail:0000169:56b033335-77ed-453a-b0a8-0aa1f951fd5b", "row_index": 169, "timestamp": "2019-08-20T13:56:06Z", "event_type": "DescribeOrganization", "event_source": "organizations.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56b033335-77ed-453a-b0a8-0aa1f951fd5b", "eventTime": "2019-08-20T13:56:06Z", "eventName": "DescribeOrganization", "eventSource": "organizations.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: organizations:DescribeOrganization on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56b033335-77ed-453a-b0a8-0aa1f951fd5b", "record_id": "flaws_cloudtrail:0000170:56b033335-77ed-453a-b0a8-0aa1f951fd5b", "row_index": 170, "timestamp": "2019-08-20T13:56:06Z", "event_type": "DescribeOrganization", "event_source": "organizations.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56b033335-77ed-453a-b0a8-0aa1f951fd5b", "eventTime": "2019-08-20T13:56:06Z", "eventName": "DescribeOrganization", "eventSource": "organizations.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.200", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: organizations:DescribeOrganization on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1fdc2e4-d99f-4aa3-b474-b32ca7f1c31e", "record_id": "flaws_cloudtrail:0000171:e1fdc2e4-d99f-4aa3-b474-b32ca7f1c31e", "row_index": 171, "timestamp": "2019-08-20T13:56:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1fdc2e4-d99f-4aa3-b474-b32ca7f1c31e", "eventTime": "2019-08-20T13:56:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1fdc2e4-d99f-4aa3-b474-b32ca7f1c31e", "record_id": "flaws_cloudtrail:0000172:e1fdc2e4-d99f-4aa3-b474-b32ca7f1c31e", "row_index": 172, "timestamp": "2019-08-20T13:56:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1fdc2e4-d99f-4aa3-b474-b32ca7f1c31e", "eventTime": "2019-08-20T13:56:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76052f45-966a-4ff2-a2ab-bb2bd4424cf8", "record_id": "flaws_cloudtrail:0000173:76052f45-966a-4ff2-a2ab-bb2bd4424cf8", "row_index": 173, "timestamp": "2019-08-20T13:56:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76052f45-966a-4ff2-a2ab-bb2bd4424cf8", "eventTime": "2019-08-20T13:56:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEb0V0TXFSdDVvMUJWd1kyM1o4Q2g4SmxCdTdrZzI5T214WVFmMU16QlZzU1ZDYW52QXlVaHVGcXIwSnJkT1dkek9IcXdFcnkwRXprbzhsZ1ZQK0IyMld1OTdRekRuM0swS21tU0p6Zkk1bHpsYUhpaVRIcENRSjBiNWh0R0svcmJYZFRHbGI1ejc2QjdDRUEvMHVYMllFa05aaW9maTVVUGMxVkY0c1BFb1NEajVwWFN2TndHR1dpOHRFNzNhd2dESGhocnBlM21Zaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76052f45-966a-4ff2-a2ab-bb2bd4424cf8", "record_id": "flaws_cloudtrail:0000174:76052f45-966a-4ff2-a2ab-bb2bd4424cf8", "row_index": 174, "timestamp": "2019-08-20T13:56:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76052f45-966a-4ff2-a2ab-bb2bd4424cf8", "eventTime": "2019-08-20T13:56:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEb0V0TXFSdDVvMUJWd1kyM1o4Q2g4SmxCdTdrZzI5T214WVFmMU16QlZzU1ZDYW52QXlVaHVGcXIwSnJkT1dkek9IcXdFcnkwRXprbzhsZ1ZQK0IyMld1OTdRekRuM0swS21tU0p6Zkk1bHpsYUhpaVRIcENRSjBiNWh0R0svcmJYZFRHbGI1ejc2QjdDRUEvMHVYMllFa05aaW9maTVVUGMxVkY0c1BFb1NEajVwWFN2TndHR1dpOHRFNzNhd2dESGhocnBlM21Zaz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0993b0ef-8d3d-4665-8709-d794fbfdf496", "record_id": "flaws_cloudtrail:0000175:0993b0ef-8d3d-4665-8709-d794fbfdf496", "row_index": 175, "timestamp": "2019-08-20T13:56:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0993b0ef-8d3d-4665-8709-d794fbfdf496", "eventTime": "2019-08-20T13:56:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmSUNob1J3M05ENWxWRXdUWElSTXNqQ0xBVlQrU2RKQmpnNmgwaWY2U0toaGRyaFpwK2hGQVdmWlZsM3FZUXIxNnZ3dzhHaGJ1RlhlQXVVVFo3RVdGK0tzdmxOUWR4WTZpNmdNV1Y5QnJud2M3NkNIdm1mQzZlOHNYOHZkUjU1cWZBVG1qTUx1Yjh2S29YOVprZTNpOElnVXpoMVZPNlgremVhVEdUS0tkUDBNQ1Rna0NNUXFRMkk4YzRPTEROS2c0RXZHMnA3VlpqblNWdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0993b0ef-8d3d-4665-8709-d794fbfdf496", "record_id": "flaws_cloudtrail:0000176:0993b0ef-8d3d-4665-8709-d794fbfdf496", "row_index": 176, "timestamp": "2019-08-20T13:56:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0993b0ef-8d3d-4665-8709-d794fbfdf496", "eventTime": "2019-08-20T13:56:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmSUNob1J3M05ENWxWRXdUWElSTXNqQ0xBVlQrU2RKQmpnNmgwaWY2U0toaGRyaFpwK2hGQVdmWlZsM3FZUXIxNnZ3dzhHaGJ1RlhlQXVVVFo3RVdGK0tzdmxOUWR4WTZpNmdNV1Y5QnJud2M3NkNIdm1mQzZlOHNYOHZkUjU1cWZBVG1qTUx1Yjh2S29YOVprZTNpOElnVXpoMVZPNlgremVhVEdUS0tkUDBNQ1Rna0NNUXFRMkk4YzRPTEROS2c0RXZHMnA3VlpqblNWdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47b440aa-6883-4e7d-b4db-bdd0d7ccd891", "record_id": "flaws_cloudtrail:0000177:47b440aa-6883-4e7d-b4db-bdd0d7ccd891", "row_index": 177, "timestamp": "2019-08-20T13:56:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47b440aa-6883-4e7d-b4db-bdd0d7ccd891", "eventTime": "2019-08-20T13:56:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPZDBjNnhJQU04TC82aHhRMUc4NWlnVFltVksvK0ZXVXE0SHZEeER3dktRd2UxTWxoM0E3ays2SlU4djY0d2ZZejFLdUkzeldCcm9LYklka0xVTE9veFNZRk9jdTBMUllzTHJjeEZmeUZYMVZua1BDZjJNYnJIMjRPZkFJR3FKN21hYVQzcmlHKzhMUGUySldEc3l1VmJTWmJ4YUlLYWVXNGMzY2xiM3VpNGNhdksxUTNtQmxGZHRrdnBmR3g4MDUyLzEyUWppamdXRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47b440aa-6883-4e7d-b4db-bdd0d7ccd891", "record_id": "flaws_cloudtrail:0000178:47b440aa-6883-4e7d-b4db-bdd0d7ccd891", "row_index": 178, "timestamp": "2019-08-20T13:56:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47b440aa-6883-4e7d-b4db-bdd0d7ccd891", "eventTime": "2019-08-20T13:56:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPZDBjNnhJQU04TC82aHhRMUc4NWlnVFltVksvK0ZXVXE0SHZEeER3dktRd2UxTWxoM0E3ays2SlU4djY0d2ZZejFLdUkzeldCcm9LYklka0xVTE9veFNZRk9jdTBMUllzTHJjeEZmeUZYMVZua1BDZjJNYnJIMjRPZkFJR3FKN21hYVQzcmlHKzhMUGUySldEc3l1VmJTWmJ4YUlLYWVXNGMzY2xiM3VpNGNhdksxUTNtQmxGZHRrdnBmR3g4MDUyLzEyUWppamdXRT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1eb9721e-0134-4b72-95fd-882bcc1e1eab", "record_id": "flaws_cloudtrail:0000179:1eb9721e-0134-4b72-95fd-882bcc1e1eab", "row_index": 179, "timestamp": "2019-08-20T13:56:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1eb9721e-0134-4b72-95fd-882bcc1e1eab", "eventTime": "2019-08-20T13:56:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6czJCc1drU1I5Y2ltQVZ6bXYwbUcrSGJ6L3g2NnhLU3NEWXRhT0Q4K1ZLOCt6OEZDblV1T0xmZEtETFppRG9aSWF0NlF2a1ZkeTl1WHpGM3ZQRnVoajA3REJPYi81NTl2dDRJUEh3S1pwU1V6bU5STGQ4eVRUY2ozMk9TZmtoakRMZThHeFJsN285cnpFaWtkZEZEd0tVL0ltMUxDV3VGR2NwSjF1QWlLQzk5bURQL0NLU0lpS2QwcER1UXJDN2oreEwvM3pJTWNiZjJNQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1eb9721e-0134-4b72-95fd-882bcc1e1eab", "record_id": "flaws_cloudtrail:0000180:1eb9721e-0134-4b72-95fd-882bcc1e1eab", "row_index": 180, "timestamp": "2019-08-20T13:56:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1eb9721e-0134-4b72-95fd-882bcc1e1eab", "eventTime": "2019-08-20T13:56:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6czJCc1drU1I5Y2ltQVZ6bXYwbUcrSGJ6L3g2NnhLU3NEWXRhT0Q4K1ZLOCt6OEZDblV1T0xmZEtETFppRG9aSWF0NlF2a1ZkeTl1WHpGM3ZQRnVoajA3REJPYi81NTl2dDRJUEh3S1pwU1V6bU5STGQ4eVRUY2ozMk9TZmtoakRMZThHeFJsN285cnpFaWtkZEZEd0tVL0ltMUxDV3VGR2NwSjF1QWlLQzk5bURQL0NLU0lpS2QwcER1UXJDN2oreEwvM3pJTWNiZjJNQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46792-a576-445f-b6b8-90f7f01acf63", "record_id": "flaws_cloudtrail:0000181:46792-a576-445f-b6b8-90f7f01acf63", "row_index": 181, "timestamp": "2019-08-20T13:56:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46792-a576-445f-b6b8-90f7f01acf63", "eventTime": "2019-08-20T13:56:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXRTFIWWEydGgzSGk4QmdkZm1Mb0x6dlVIU0haZTBuZmV4d2hqRS9oZU02d2UvSHd0eFZhY0dRTURiOGw2am1LK0JXM250ZVkxS3FROFViZGhld2swcWF4LzdkeGF3UVJDWnlvaXcwczlPNEFOZ1JSVHRwUHhzczFZR1p6aXVLWmNHNzhnVDJ1RmtNRm82amFUcllTNmFPSm1CcWdrb3pUSmNIWVNCUnRkejlnUHZSOXh1QmNBMU5lRWJIZUdFNjk4R01TR1RzcFk5RWUwZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46792-a576-445f-b6b8-90f7f01acf63", "record_id": "flaws_cloudtrail:0000182:46792-a576-445f-b6b8-90f7f01acf63", "row_index": 182, "timestamp": "2019-08-20T13:56:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46792-a576-445f-b6b8-90f7f01acf63", "eventTime": "2019-08-20T13:56:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXRTFIWWEydGgzSGk4QmdkZm1Mb0x6dlVIU0haZTBuZmV4d2hqRS9oZU02d2UvSHd0eFZhY0dRTURiOGw2am1LK0JXM250ZVkxS3FROFViZGhld2swcWF4LzdkeGF3UVJDWnlvaXcwczlPNEFOZ1JSVHRwUHhzczFZR1p6aXVLWmNHNzhnVDJ1RmtNRm82amFUcllTNmFPSm1CcWdrb3pUSmNIWVNCUnRkejlnUHZSOXh1QmNBMU5lRWJIZUdFNjk4R01TR1RzcFk5RWUwZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ac9bc12-b529-4552-a8d0-9b6a4b479835d", "record_id": "flaws_cloudtrail:0000183:3ac9bc12-b529-4552-a8d0-9b6a4b479835d", "row_index": 183, "timestamp": "2019-08-20T13:57:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ac9bc12-b529-4552-a8d0-9b6a4b479835d", "eventTime": "2019-08-20T13:57:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaN2FxdkJzaFJPeTdLOWFlK1B6RHZwQXhOMnFxbW5yRlJHYTRPbWVpV3dDU3hIZmtkU0wreE9DdW1UejZLUFFDYnREMVZnTVp1Znk5YVlLK3RBeHdwS09MWEtvMGcwdzE1eGtPNVltdVkwZ05FSWtCZFkrSFBPblcxNXNHWmVUZVlkaHB4UkVhWTY4cEdFWUZkQVA1NmFjSmRhYmNkRlpIZy9jZmR4RVRZODQrMGQ5WGZvWU1LVWVWby8rV3RFRnhXeFhxM1V3MUNQYWZVdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ac9bc12-b529-4552-a8d0-9b6a4b479835d", "record_id": "flaws_cloudtrail:0000184:3ac9bc12-b529-4552-a8d0-9b6a4b479835d", "row_index": 184, "timestamp": "2019-08-20T13:57:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ac9bc12-b529-4552-a8d0-9b6a4b479835d", "eventTime": "2019-08-20T13:57:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaN2FxdkJzaFJPeTdLOWFlK1B6RHZwQXhOMnFxbW5yRlJHYTRPbWVpV3dDU3hIZmtkU0wreE9DdW1UejZLUFFDYnREMVZnTVp1Znk5YVlLK3RBeHdwS09MWEtvMGcwdzE1eGtPNVltdVkwZ05FSWtCZFkrSFBPblcxNXNHWmVUZVlkaHB4UkVhWTY4cEdFWUZkQVA1NmFjSmRhYmNkRlpIZy9jZmR4RVRZODQrMGQ5WGZvWU1LVWVWby8rV3RFRnhXeFhxM1V3MUNQYWZVdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef258fc2-eb8d-459b-b16c-1e94e5ee595e", "record_id": "flaws_cloudtrail:0000185:ef258fc2-eb8d-459b-b16c-1e94e5ee595e", "row_index": 185, "timestamp": "2019-08-20T13:57:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef258fc2-eb8d-459b-b16c-1e94e5ee595e", "eventTime": "2019-08-20T13:57:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTNlFZdE5kOXFvQ1JaZUxmckI4c1BSek5ubU1xc3crck5mTFpoQk4xSThML2FtUGRwRmQyUmVRVVBWb3J5VTg0cUJpYmtCaVVDRlhSeFlib1RyT1l5YS9odzFNMkc2TUdFQnlrb2doclJjKzRoSFNlNHliVnhFWFoxeE9sSFJiUmgyODl6SFVhS00xU2twSWdmSUhpR3duWm9pWStIWWdNY1U5WXdRK0pwdk1MdGVhRDZySXhUcGlrWldZRGZ1cmgrRVh2ZUtmSzhDRGkvdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef258fc2-eb8d-459b-b16c-1e94e5ee595e", "record_id": "flaws_cloudtrail:0000186:ef258fc2-eb8d-459b-b16c-1e94e5ee595e", "row_index": 186, "timestamp": "2019-08-20T13:57:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef258fc2-eb8d-459b-b16c-1e94e5ee595e", "eventTime": "2019-08-20T13:57:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTNlFZdE5kOXFvQ1JaZUxmckI4c1BSek5ubU1xc3crck5mTFpoQk4xSThML2FtUGRwRmQyUmVRVVBWb3J5VTg0cUJpYmtCaVVDRlhSeFlib1RyT1l5YS9odzFNMkc2TUdFQnlrb2doclJjKzRoSFNlNHliVnhFWFoxeE9sSFJiUmgyODl6SFVhS00xU2twSWdmSUhpR3duWm9pWStIWWdNY1U5WXdRK0pwdk1MdGVhRDZySXhUcGlrWldZRGZ1cmgrRVh2ZUtmSzhDRGkvdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "945752b8c-9188-4587-8a70-62586d6134", "record_id": "flaws_cloudtrail:0000187:945752b8c-9188-4587-8a70-62586d6134", "row_index": 187, "timestamp": "2019-08-20T13:57:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "945752b8c-9188-4587-8a70-62586d6134", "eventTime": "2019-08-20T13:57:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4ajM1WmpPSHBBRURWWUdoUVJBS0dUT1ZiQ2pNRjBPYnM1amZUSGZIamNKT2FMQXkyeldSUXdVUnlNVnNzZ1pYUWNMbnJHekhkem1odThBZmthdzdUTHlTaDczOTB1NVhQS3ZiM2J3aVlnQzBUVVNqK09nVVBQR1hERnJ2ejdTZURCK0tOdklNMlQwR2lWa203SlBZWHppWVhSRThaL1hpSEtDN2ZodUNHSXJRWDdZazBFMHhNeHJiRkFLZVFQcTZ1UzdSMmlnZnI5c2M0Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "945752b8c-9188-4587-8a70-62586d6134", "record_id": "flaws_cloudtrail:0000188:945752b8c-9188-4587-8a70-62586d6134", "row_index": 188, "timestamp": "2019-08-20T13:57:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "945752b8c-9188-4587-8a70-62586d6134", "eventTime": "2019-08-20T13:57:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4ajM1WmpPSHBBRURWWUdoUVJBS0dUT1ZiQ2pNRjBPYnM1amZUSGZIamNKT2FMQXkyeldSUXdVUnlNVnNzZ1pYUWNMbnJHekhkem1odThBZmthdzdUTHlTaDczOTB1NVhQS3ZiM2J3aVlnQzBUVVNqK09nVVBQR1hERnJ2ejdTZURCK0tOdklNMlQwR2lWa203SlBZWHppWVhSRThaL1hpSEtDN2ZodUNHSXJRWDdZazBFMHhNeHJiRkFLZVFQcTZ1UzdSMmlnZnI5c2M0Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a762a51a-5ad9-4575-9b58-7912f8fbf0b5", "record_id": "flaws_cloudtrail:0000189:a762a51a-5ad9-4575-9b58-7912f8fbf0b5", "row_index": 189, "timestamp": "2019-08-20T13:57:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a762a51a-5ad9-4575-9b58-7912f8fbf0b5", "eventTime": "2019-08-20T13:57:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjQ2U5cVEwUmZSUzQ3bXkwY1RSTGIvTGxrY1F0a3QvNUVPTksxa0gwMnpxUTZkLzlIQTg2ZDBHODh0MjBWM0x4Wm1PRFh5VUJxaGJHdDVNRnkxUDNkWTVoSUZsYVBjclh1aklmR05kWXowY2h3MGNvdDEvVkd4RGt2cm5TSmkxL21rdlZxZkpRbnhvOUNIZ2FBLzMzbUVtM2ErVE16c090cTlwdUhSbWdhalg2M2xxQmtDR2tDclVaNTJhSzNRZk9mMEpZOVN5cklBNk1KUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a762a51a-5ad9-4575-9b58-7912f8fbf0b5", "record_id": "flaws_cloudtrail:0000190:a762a51a-5ad9-4575-9b58-7912f8fbf0b5", "row_index": 190, "timestamp": "2019-08-20T13:57:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a762a51a-5ad9-4575-9b58-7912f8fbf0b5", "eventTime": "2019-08-20T13:57:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjQ2U5cVEwUmZSUzQ3bXkwY1RSTGIvTGxrY1F0a3QvNUVPTksxa0gwMnpxUTZkLzlIQTg2ZDBHODh0MjBWM0x4Wm1PRFh5VUJxaGJHdDVNRnkxUDNkWTVoSUZsYVBjclh1aklmR05kWXowY2h3MGNvdDEvVkd4RGt2cm5TSmkxL21rdlZxZkpRbnhvOUNIZ2FBLzMzbUVtM2ErVE16c090cTlwdUhSbWdhalg2M2xxQmtDR2tDclVaNTJhSzNRZk9mMEpZOVN5cklBNk1KUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b544c2aa-3736-4340-b30b-d81b3e55dc3b", "record_id": "flaws_cloudtrail:0000191:b544c2aa-3736-4340-b30b-d81b3e55dc3b", "row_index": 191, "timestamp": "2019-08-20T13:57:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b544c2aa-3736-4340-b30b-d81b3e55dc3b", "eventTime": "2019-08-20T13:57:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLcVZSVGxsV1YzY1JJb3UwL25HbFg3dXNDZmtPSERpbUpVc1dXNGJuN0MxUDc1MGtJamJoUUZ1K3IrS0cwWUYzZ2FLZFVuaW04VUFaUjk5QWkwczNrL09Sa0NSQzFRQ2JLcmxyMWRIcXdEQk5LMlFNZHFpR0IrQWRXWHNmZk9zRFgwY0hNeWhIYW4zdGRzaTFWZ2JXaEIzdG5jVThGQ0NrNlRvc3ROK2RoLytwdnFUQ1NZY2phUHQreFl4MWFaVlJXK3lsRGdzUC84bHpMdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b544c2aa-3736-4340-b30b-d81b3e55dc3b", "record_id": "flaws_cloudtrail:0000192:b544c2aa-3736-4340-b30b-d81b3e55dc3b", "row_index": 192, "timestamp": "2019-08-20T13:57:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b544c2aa-3736-4340-b30b-d81b3e55dc3b", "eventTime": "2019-08-20T13:57:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJLcVZSVGxsV1YzY1JJb3UwL25HbFg3dXNDZmtPSERpbUpVc1dXNGJuN0MxUDc1MGtJamJoUUZ1K3IrS0cwWUYzZ2FLZFVuaW04VUFaUjk5QWkwczNrL09Sa0NSQzFRQ2JLcmxyMWRIcXdEQk5LMlFNZHFpR0IrQWRXWHNmZk9zRFgwY0hNeWhIYW4zdGRzaTFWZ2JXaEIzdG5jVThGQ0NrNlRvc3ROK2RoLytwdnFUQ1NZY2phUHQreFl4MWFaVlJXK3lsRGdzUC84bHpMdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e433e57-f38a-4135-9d3b-5499909b8d3d", "record_id": "flaws_cloudtrail:0000193:2e433e57-f38a-4135-9d3b-5499909b8d3d", "row_index": 193, "timestamp": "2019-08-20T13:57:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e433e57-f38a-4135-9d3b-5499909b8d3d", "eventTime": "2019-08-20T13:57:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWYzFSTzJoWVdXcy9wcERkck52QjU2UUpNMDNjNkw2UzM0Tk1jTWtIeHFLUFVIQVc1dExkbEtrbnQ0ellxOTZhQXJFTW5IblJYemxXNjNjUk8xSXVlSTcxRWI1SXhBN0ZxZUFiLzFBYXoxRDZ0SjFBWTYwWWtnS1hES0ZSY1I5aTJjWittUjZXSlpRS1BJZ3YyQVVEdTVySnVCYXAxbVBOYXVNb3lUMFF4ZmVickZSWHV4by96eUoxcWM2U3lMbm9XVmJPTU9BZG1DNDJ5UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e433e57-f38a-4135-9d3b-5499909b8d3d", "record_id": "flaws_cloudtrail:0000194:2e433e57-f38a-4135-9d3b-5499909b8d3d", "row_index": 194, "timestamp": "2019-08-20T13:57:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e433e57-f38a-4135-9d3b-5499909b8d3d", "eventTime": "2019-08-20T13:57:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWYzFSTzJoWVdXcy9wcERkck52QjU2UUpNMDNjNkw2UzM0Tk1jTWtIeHFLUFVIQVc1dExkbEtrbnQ0ellxOTZhQXJFTW5IblJYemxXNjNjUk8xSXVlSTcxRWI1SXhBN0ZxZUFiLzFBYXoxRDZ0SjFBWTYwWWtnS1hES0ZSY1I5aTJjWittUjZXSlpRS1BJZ3YyQVVEdTVySnVCYXAxbVBOYXVNb3lUMFF4ZmVickZSWHV4by96eUoxcWM2U3lMbm9XVmJPTU9BZG1DNDJ5UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "871cb5dc-7905-46ab-8d37-f180042b888b", "record_id": "flaws_cloudtrail:0000195:871cb5dc-7905-46ab-8d37-f180042b888b", "row_index": 195, "timestamp": "2019-08-20T13:57:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "871cb5dc-7905-46ab-8d37-f180042b888b", "eventTime": "2019-08-20T13:57:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBa0d3SElTQlRsMUd6YjJ0NytiUC9OSVZmWjRLWG1IaUlDbHg5TFhZY1dBR3Y2UzFSVEV4NHpCaGtFaFJoNjh0UTR2SEcyZGhPNXNaaWtlNzI2WkFJR25ieUU1L2Y3dDNqdHNnV2lmOEVMZFVwWGtuWXJXSVRjemNFK0J1OElGUWRSQ1ZVMDJzKzZMUGFjSGhWN3Y4R1M0eUlBZytGKzl3RUJwbDZVcWNFYmdLRVdJZWxVcExNYkh5Rm8yeEJHLzdFL3ZvSHpmanJ5YTRuZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "871cb5dc-7905-46ab-8d37-f180042b888b", "record_id": "flaws_cloudtrail:0000196:871cb5dc-7905-46ab-8d37-f180042b888b", "row_index": 196, "timestamp": "2019-08-20T13:57:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "871cb5dc-7905-46ab-8d37-f180042b888b", "eventTime": "2019-08-20T13:57:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBa0d3SElTQlRsMUd6YjJ0NytiUC9OSVZmWjRLWG1IaUlDbHg5TFhZY1dBR3Y2UzFSVEV4NHpCaGtFaFJoNjh0UTR2SEcyZGhPNXNaaWtlNzI2WkFJR25ieUU1L2Y3dDNqdHNnV2lmOEVMZFVwWGtuWXJXSVRjemNFK0J1OElGUWRSQ1ZVMDJzKzZMUGFjSGhWN3Y4R1M0eUlBZytGKzl3RUJwbDZVcWNFYmdLRVdJZWxVcExNYkh5Rm8yeEJHLzdFL3ZvSHpmanJ5YTRuZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a26a0d4f-de61-4688-b2b4-281691cd021ba", "record_id": "flaws_cloudtrail:0000197:a26a0d4f-de61-4688-b2b4-281691cd021ba", "row_index": 197, "timestamp": "2019-08-20T13:57:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a26a0d4f-de61-4688-b2b4-281691cd021ba", "eventTime": "2019-08-20T13:57:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4bVgweVJkMzk3SytSUGJnWWF3RGsxYjB4aEtpa2dSVzZhOXJDdjFlV3FrZW5RZllqNTJrZUkzSWx2S2lBbTA3bU1DZHYxSTViMlFZMERWbDVPdkhyZmVsNEtuMUdUNWlUSmdtY3d6Tk9UZEE1cFl6Rzg1R0d6bFkyRlQ1Q1ArOEh2ak50QUdTYzdxcWNlWDhwYURaN2J1OElRRGNXQmJHTG9ZRTBqYnNoWWc5c0lMVDVXT0JCWE1DbERXaDRudGU0WGRzMjA0Ulp1c1RLdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a26a0d4f-de61-4688-b2b4-281691cd021ba", "record_id": "flaws_cloudtrail:0000198:a26a0d4f-de61-4688-b2b4-281691cd021ba", "row_index": 198, "timestamp": "2019-08-20T13:57:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a26a0d4f-de61-4688-b2b4-281691cd021ba", "eventTime": "2019-08-20T13:57:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4bVgweVJkMzk3SytSUGJnWWF3RGsxYjB4aEtpa2dSVzZhOXJDdjFlV3FrZW5RZllqNTJrZUkzSWx2S2lBbTA3bU1DZHYxSTViMlFZMERWbDVPdkhyZmVsNEtuMUdUNWlUSmdtY3d6Tk9UZEE1cFl6Rzg1R0d6bFkyRlQ1Q1ArOEh2ak50QUdTYzdxcWNlWDhwYURaN2J1OElRRGNXQmJHTG9ZRTBqYnNoWWc5c0lMVDVXT0JCWE1DbERXaDRudGU0WGRzMjA0Ulp1c1RLdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb69ad5a-ed65-43ea-bc78-827237675972", "record_id": "flaws_cloudtrail:0000199:bb69ad5a-ed65-43ea-bc78-827237675972", "row_index": 199, "timestamp": "2019-08-20T13:57:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb69ad5a-ed65-43ea-bc78-827237675972", "eventTime": "2019-08-20T13:57:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKWkpPYUVWTG92ekFXTjhCL3pHVTdwUzVnRFlOVGM4YVJuZVArbWpuYUpBMDJwWXZ4M0pBNzFZM3Qwa2ZlZU05VnBtMktYYTRpelhXYXlSYkozUlIzOTZCWisyVlBMTktYd0lYSDNBWTFqTjlRRXVjY2t3SXVtM3JzQmoxbzFwQ1NNN2taWWoxbUlSRGkzdHJwVnV0aUJVTWJuR0RTOG1KLzQwRWVXbk5TbldMSkVNTEtJZ01JRThXS2NFRFZNVEc5dmNLZjJ1NFkydlBxNE5QNEt1QXd1U1JxVkFxMG53PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb69ad5a-ed65-43ea-bc78-827237675972", "record_id": "flaws_cloudtrail:0000200:bb69ad5a-ed65-43ea-bc78-827237675972", "row_index": 200, "timestamp": "2019-08-20T13:57:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb69ad5a-ed65-43ea-bc78-827237675972", "eventTime": "2019-08-20T13:57:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKWkpPYUVWTG92ekFXTjhCL3pHVTdwUzVnRFlOVGM4YVJuZVArbWpuYUpBMDJwWXZ4M0pBNzFZM3Qwa2ZlZU05VnBtMktYYTRpelhXYXlSYkozUlIzOTZCWisyVlBMTktYd0lYSDNBWTFqTjlRRXVjY2t3SXVtM3JzQmoxbzFwQ1NNN2taWWoxbUlSRGkzdHJwVnV0aUJVTWJuR0RTOG1KLzQwRWVXbk5TbldMSkVNTEtJZ01JRThXS2NFRFZNVEc5dmNLZjJ1NFkydlBxNE5QNEt1QXd1U1JxVkFxMG53PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dd263b1-0300-47e6-9d7f-3a4f0ea96302", "record_id": "flaws_cloudtrail:0000201:9dd263b1-0300-47e6-9d7f-3a4f0ea96302", "row_index": 201, "timestamp": "2019-08-20T13:57:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dd263b1-0300-47e6-9d7f-3a4f0ea96302", "eventTime": "2019-08-20T13:57:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPc0Noby9mL21UU2hQakFoOVVLT1ZZa2UvcTlqUlBlbWxaSXd4bDF4WUtXOWpPZ3N3WkV5UkEzY0ZlZmxDQmhKci9qZXlxTEZmejNHblIwSjA1YWgxNGtlSmNEaDkzQTZhaGJDUTd3T1puS1N3ZFRCTDNiWUlnMytyMGxZbkdkMWd5MFBDc3hnQUR4MGJ2blpqOUtWdzdOdjRDY1dNSmg2ZmJReGw1Uy9GemJoNkVkRnRLcDU0RHhpR0xyV0tadGlWc2tYb2hwb1dvaWtaWWhsazh6c0xBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dd263b1-0300-47e6-9d7f-3a4f0ea96302", "record_id": "flaws_cloudtrail:0000202:9dd263b1-0300-47e6-9d7f-3a4f0ea96302", "row_index": 202, "timestamp": "2019-08-20T13:57:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dd263b1-0300-47e6-9d7f-3a4f0ea96302", "eventTime": "2019-08-20T13:57:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPc0Noby9mL21UU2hQakFoOVVLT1ZZa2UvcTlqUlBlbWxaSXd4bDF4WUtXOWpPZ3N3WkV5UkEzY0ZlZmxDQmhKci9qZXlxTEZmejNHblIwSjA1YWgxNGtlSmNEaDkzQTZhaGJDUTd3T1puS1N3ZFRCTDNiWUlnMytyMGxZbkdkMWd5MFBDc3hnQUR4MGJ2blpqOUtWdzdOdjRDY1dNSmg2ZmJReGw1Uy9GemJoNkVkRnRLcDU0RHhpR0xyV0tadGlWc2tYb2hwb1dvaWtaWWhsazh6c0xBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "187cb539-d045-4681-8b56-0569b0094fbb", "record_id": "flaws_cloudtrail:0000203:187cb539-d045-4681-8b56-0569b0094fbb", "row_index": 203, "timestamp": "2019-08-20T13:57:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "187cb539-d045-4681-8b56-0569b0094fbb", "eventTime": "2019-08-20T13:57:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVb3F0b1Q2dE40SjM2R1FveU9DcGxHaExhcDU4U3pGQ2lBT3ZuRzRxSGJYWVJCR09WOWpCMXJxZHlTQURkZkEvTlRQT1gzR09tK3dUZ1BIQ1N2a21ZcVNuTjBnaGVNSDA4bWE1OG80b3FFZ0pLeitEeXdzZVdNdURsRHUweFVka000VmJXVTFRYlRuWHVBMGdOQVhoRFByazY5aDZReGI3RzVtaWZNMnRMc1o4b2VVSlVsODM0UWR1MXdaZEw1eDZLZVgxTTlDYnd2RnNQa3JVNXlKWERDNWxsTXRyc2E4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "187cb539-d045-4681-8b56-0569b0094fbb", "record_id": "flaws_cloudtrail:0000204:187cb539-d045-4681-8b56-0569b0094fbb", "row_index": 204, "timestamp": "2019-08-20T13:57:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "187cb539-d045-4681-8b56-0569b0094fbb", "eventTime": "2019-08-20T13:57:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVb3F0b1Q2dE40SjM2R1FveU9DcGxHaExhcDU4U3pGQ2lBT3ZuRzRxSGJYWVJCR09WOWpCMXJxZHlTQURkZkEvTlRQT1gzR09tK3dUZ1BIQ1N2a21ZcVNuTjBnaGVNSDA4bWE1OG80b3FFZ0pLeitEeXdzZVdNdURsRHUweFVka000VmJXVTFRYlRuWHVBMGdOQVhoRFByazY5aDZReGI3RzVtaWZNMnRMc1o4b2VVSlVsODM0UWR1MXdaZEw1eDZLZVgxTTlDYnd2RnNQa3JVNXlKWERDNWxsTXRyc2E4PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c49b1bf-6729-47eb-bbf7-92c5f2b1a2d0", "record_id": "flaws_cloudtrail:0000205:1c49b1bf-6729-47eb-bbf7-92c5f2b1a2d0", "row_index": 205, "timestamp": "2019-08-20T13:57:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c49b1bf-6729-47eb-bbf7-92c5f2b1a2d0", "eventTime": "2019-08-20T13:57:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhb25iOUQ1OEt2QlF2M1M4V29PWkx2N0ZjanBMOVN2Mmh4dTdTcUZ6WUFLNXF1cERhem9TOERFM3dFeHlxVnZpczkvQkVtSDUrVDN2S0lqSHlnSzVZV3pLODRma3pNZlhhbU92aDVrYlg4dHdJTVR3d1lJL0hXbTZLRHIvZWN6VXdGbVRuTlY1eWNqcldxZGI2VEVMMU1UdjVmMjhQRk5xa2t3VTZuQlBqcmZra0dPbjJYT3VpS3JSMnpWK1NEZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c49b1bf-6729-47eb-bbf7-92c5f2b1a2d0", "record_id": "flaws_cloudtrail:0000206:1c49b1bf-6729-47eb-bbf7-92c5f2b1a2d0", "row_index": 206, "timestamp": "2019-08-20T13:57:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c49b1bf-6729-47eb-bbf7-92c5f2b1a2d0", "eventTime": "2019-08-20T13:57:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhb25iOUQ1OEt2QlF2M1M4V29PWkx2N0ZjanBMOVN2Mmh4dTdTcUZ6WUFLNXF1cERhem9TOERFM3dFeHlxVnZpczkvQkVtSDUrVDN2S0lqSHlnSzVZV3pLODRma3pNZlhhbU92aDVrYlg4dHdJTVR3d1lJL0hXbTZLRHIvZWN6VXdGbVRuTlY1eWNqcldxZGI2VEVMMU1UdjVmMjhQRk5xa2t3VTZuQlBqcmZra0dPbjJYT3VpS3JSMnpWK1NEZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b6559cc-887b-44b9-ba40-1de48bddc53e", "record_id": "flaws_cloudtrail:0000207:5b6559cc-887b-44b9-ba40-1de48bddc53e", "row_index": 207, "timestamp": "2019-08-20T13:57:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b6559cc-887b-44b9-ba40-1de48bddc53e", "eventTime": "2019-08-20T13:57:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRcC9XVWJMZlhBcldVd0gySVJyc2xQd2V1Z09ETlNTYUszaFFxZWYwTkl6YWozOGl3MFVBNlowUWpyVTlTV3hQSlUxTmQ4ODBtM1hhTkE4c1hGL3Nhc3V4VEJYS2dMckpPeDFlZFlDVFQxSEpIVmFKRitHc0JKZm5OSmwzOXI0SUVFUm44ZTFwSmpYUktvS3hYeURBOTlka1dnMmE2N0puRzBnQXF4VFFBNGJEQVU0eHJJYmJObjZKWjVpRHV3NFdnQjVla0M2MjZCOEh5U1FscXprMHM5QVpsaTA3TVpzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b6559cc-887b-44b9-ba40-1de48bddc53e", "record_id": "flaws_cloudtrail:0000208:5b6559cc-887b-44b9-ba40-1de48bddc53e", "row_index": 208, "timestamp": "2019-08-20T13:57:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b6559cc-887b-44b9-ba40-1de48bddc53e", "eventTime": "2019-08-20T13:57:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRcC9XVWJMZlhBcldVd0gySVJyc2xQd2V1Z09ETlNTYUszaFFxZWYwTkl6YWozOGl3MFVBNlowUWpyVTlTV3hQSlUxTmQ4ODBtM1hhTkE4c1hGL3Nhc3V4VEJYS2dMckpPeDFlZFlDVFQxSEpIVmFKRitHc0JKZm5OSmwzOXI0SUVFUm44ZTFwSmpYUktvS3hYeURBOTlka1dnMmE2N0puRzBnQXF4VFFBNGJEQVU0eHJJYmJObjZKWjVpRHV3NFdnQjVla0M2MjZCOEh5U1FscXprMHM5QVpsaTA3TVpzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60bd2c2c-0d20-44e9-bbaa-24b30f6aed19", "record_id": "flaws_cloudtrail:0000209:60bd2c2c-0d20-44e9-bbaa-24b30f6aed19", "row_index": 209, "timestamp": "2019-08-20T13:57:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60bd2c2c-0d20-44e9-bbaa-24b30f6aed19", "eventTime": "2019-08-20T13:57:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxTnc5M0lSUkFCTW1ZM0tmc2ZHWnR6T243NUxYOWVKTTY3di9sQ1BXM09YYkxCYXNtQWRWaWZDQXpXVGFudEZzNGFSRlFsU2xGM1hGb09lajY5Q2dEUjZhZkx5TjlMRHVXLy9FeWdqWmk5R29vVTRhY2x4UTJidmVlNk1lS3hwYmJEb00vZ1VxcVVzcjM4NE5KTUJkaitQN21OOExOSEJnY0R1cWdXa2lrT0lBL1hjakE5c3RrdkkwY2VPYUxRSk9HWGZRVDNWWVBpNG5QRDRLbjhweVhBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60bd2c2c-0d20-44e9-bbaa-24b30f6aed19", "record_id": "flaws_cloudtrail:0000210:60bd2c2c-0d20-44e9-bbaa-24b30f6aed19", "row_index": 210, "timestamp": "2019-08-20T13:57:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60bd2c2c-0d20-44e9-bbaa-24b30f6aed19", "eventTime": "2019-08-20T13:57:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxTnc5M0lSUkFCTW1ZM0tmc2ZHWnR6T243NUxYOWVKTTY3di9sQ1BXM09YYkxCYXNtQWRWaWZDQXpXVGFudEZzNGFSRlFsU2xGM1hGb09lajY5Q2dEUjZhZkx5TjlMRHVXLy9FeWdqWmk5R29vVTRhY2x4UTJidmVlNk1lS3hwYmJEb00vZ1VxcVVzcjM4NE5KTUJkaitQN21OOExOSEJnY0R1cWdXa2lrT0lBL1hjakE5c3RrdkkwY2VPYUxRSk9HWGZRVDNWWVBpNG5QRDRLbjhweVhBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a429b0b-200d-404b-8430-a84d8579c6ea", "record_id": "flaws_cloudtrail:0000211:5a429b0b-200d-404b-8430-a84d8579c6ea", "row_index": 211, "timestamp": "2019-08-20T13:57:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a429b0b-200d-404b-8430-a84d8579c6ea", "eventTime": "2019-08-20T13:57:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6NEJ2UldiSUU5VnYxSER2WmRwR3ZCbGljdlVPeS85NE5RTXQxREg2a2IzN092Qk9lTmRpZjBQUXUrZWQrMUxkWUlkQ243c2M3ZmluL3FqcmZ5YUNSZUpUejZOaUE1VnpZQmQ2WFc2R1ZQZE9ndEYyenJVSnR4MlZzRXF1cnRkWU1rQVppb2gvd3BUa2pxcGRmMDJpM1RGNUZxSUU3NEcvd1VheDNXc1F0aENqaUkzV0ZZQk12UGxpUk9uYjM4RGxIbUdBWFR3R2YzMnN4QS93SVdDZnBoYUEvdnFBdTZVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a429b0b-200d-404b-8430-a84d8579c6ea", "record_id": "flaws_cloudtrail:0000212:5a429b0b-200d-404b-8430-a84d8579c6ea", "row_index": 212, "timestamp": "2019-08-20T13:57:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a429b0b-200d-404b-8430-a84d8579c6ea", "eventTime": "2019-08-20T13:57:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6NEJ2UldiSUU5VnYxSER2WmRwR3ZCbGljdlVPeS85NE5RTXQxREg2a2IzN092Qk9lTmRpZjBQUXUrZWQrMUxkWUlkQ243c2M3ZmluL3FqcmZ5YUNSZUpUejZOaUE1VnpZQmQ2WFc2R1ZQZE9ndEYyenJVSnR4MlZzRXF1cnRkWU1rQVppb2gvd3BUa2pxcGRmMDJpM1RGNUZxSUU3NEcvd1VheDNXc1F0aENqaUkzV0ZZQk12UGxpUk9uYjM4RGxIbUdBWFR3R2YzMnN4QS93SVdDZnBoYUEvdnFBdTZVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fbbe84b-d765-4b0b-aa65-0e04b237a783", "record_id": "flaws_cloudtrail:0000213:9fbbe84b-d765-4b0b-aa65-0e04b237a783", "row_index": 213, "timestamp": "2019-08-20T13:57:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fbbe84b-d765-4b0b-aa65-0e04b237a783", "eventTime": "2019-08-20T13:57:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnclVsT1RSbjk0QTNBRi9JZVdncTR1TFhka2RNWVg4UE8wRHYyYUV2WXFtUnQzZWZ5UnJsTVBCSUZIUVluQjRvZ3BLNnFsa3BoVWFDYWxrYzMxMzJFc0hyWEt2cnIrOEo5bWt1UmZmSmV5STVhYlh4bzMwMitrWThTRnpWcTQ1Q200bi9IU2hkaERQZ1JLQVkvQWFlOVBOaWtGQzBYYmV6bnlvREtmeEgvOEJCUGZMYWVoUHRoQTZqTHRmWG4vQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d10553-8615-4327-ae5b-099877ae49ae", "record_id": "flaws_cloudtrail:0000214:1d10553-8615-4327-ae5b-099877ae49ae", "row_index": 214, "timestamp": "2019-08-20T13:57:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d10553-8615-4327-ae5b-099877ae49ae", "eventTime": "2019-08-20T13:57:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjOElJNGkzaERFTk1ZWTM1UGR3Mm5YVmtPck53QVVMdDEvb0dvZlhuVGlucXlEWVlUcmg1U05qdDFjN3VieHpzMVlTQzA2b0dRNVgwRmxHL0cxMlF2aUx1MnI4RlV3dlpMT0cvdElTa01rWWs1a3FGNE43OFZQYjJlb3pxREd5SDdVazhKMktvUFBHWkk2MHppNXZTazJObjdDaVoydG5kZWJVV3BST2kyRG84QThublY1NGtKK3VlMEwyOEwyM1liQUtGOHZ6NVkrSDZ3N01vRHdEL3FRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fbbe84b-d765-4b0b-aa65-0e04b237a783", "record_id": "flaws_cloudtrail:0000215:9fbbe84b-d765-4b0b-aa65-0e04b237a783", "row_index": 215, "timestamp": "2019-08-20T13:57:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fbbe84b-d765-4b0b-aa65-0e04b237a783", "eventTime": "2019-08-20T13:57:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnclVsT1RSbjk0QTNBRi9JZVdncTR1TFhka2RNWVg4UE8wRHYyYUV2WXFtUnQzZWZ5UnJsTVBCSUZIUVluQjRvZ3BLNnFsa3BoVWFDYWxrYzMxMzJFc0hyWEt2cnIrOEo5bWt1UmZmSmV5STVhYlh4bzMwMitrWThTRnpWcTQ1Q200bi9IU2hkaERQZ1JLQVkvQWFlOVBOaWtGQzBYYmV6bnlvREtmeEgvOEJCUGZMYWVoUHRoQTZqTHRmWG4vQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d10553-8615-4327-ae5b-099877ae49ae", "record_id": "flaws_cloudtrail:0000216:1d10553-8615-4327-ae5b-099877ae49ae", "row_index": 216, "timestamp": "2019-08-20T13:57:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d10553-8615-4327-ae5b-099877ae49ae", "eventTime": "2019-08-20T13:57:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjOElJNGkzaERFTk1ZWTM1UGR3Mm5YVmtPck53QVVMdDEvb0dvZlhuVGlucXlEWVlUcmg1U05qdDFjN3VieHpzMVlTQzA2b0dRNVgwRmxHL0cxMlF2aUx1MnI4RlV3dlpMT0cvdElTa01rWWs1a3FGNE43OFZQYjJlb3pxREd5SDdVazhKMktvUFBHWkk2MHppNXZTazJObjdDaVoydG5kZWJVV3BST2kyRG84QThublY1NGtKK3VlMEwyOEwyM1liQUtGOHZ6NVkrSDZ3N01vRHdEL3FRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcffd5aa-2dc0-47be-8292-c0953de27aa7", "record_id": "flaws_cloudtrail:0000217:bcffd5aa-2dc0-47be-8292-c0953de27aa7", "row_index": 217, "timestamp": "2019-08-20T13:57:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcffd5aa-2dc0-47be-8292-c0953de27aa7", "eventTime": "2019-08-20T13:57:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOVm5aZE1wSFBZMDlpYjcrUnlQUTJKZENDa1RmWjNkcmcwdFR3T1U1bUxjWUY4VkRuTEE2bjNBUm43UWRUTmFKQ0RIRUhEQXhaODArbmZBdU9WdGtEa3lXMk03bWRZYlVBbVhXLzBHNVdwczVuU2piOW1MY1ZOa3lHV3dDcVpCOEM3RXZuNnArZXNlZVlWNmN6dzNxaksxcWZrei9rQ2xoZlJ3VDdyWnJOTFpjRWtPVFlwb3cyN3p6akEvSktMM3R3bURESVFSdDUybCtuOWRNcGhSSnNuOHVxb0lsb2FzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9fe7d56-03a8-4c8b-8310-898a16dbc647", "record_id": "flaws_cloudtrail:0000218:d9fe7d56-03a8-4c8b-8310-898a16dbc647", "row_index": 218, "timestamp": "2019-08-20T13:57:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9fe7d56-03a8-4c8b-8310-898a16dbc647", "eventTime": "2019-08-20T13:57:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZYML29G3ZH3RKV3D", "expiration": "Aug 20, 2019 8:23:33 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcffd5aa-2dc0-47be-8292-c0953de27aa7", "record_id": "flaws_cloudtrail:0000219:bcffd5aa-2dc0-47be-8292-c0953de27aa7", "row_index": 219, "timestamp": "2019-08-20T13:57:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcffd5aa-2dc0-47be-8292-c0953de27aa7", "eventTime": "2019-08-20T13:57:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOVm5aZE1wSFBZMDlpYjcrUnlQUTJKZENDa1RmWjNkcmcwdFR3T1U1bUxjWUY4VkRuTEE2bjNBUm43UWRUTmFKQ0RIRUhEQXhaODArbmZBdU9WdGtEa3lXMk03bWRZYlVBbVhXLzBHNVdwczVuU2piOW1MY1ZOa3lHV3dDcVpCOEM3RXZuNnArZXNlZVlWNmN6dzNxaksxcWZrei9rQ2xoZlJ3VDdyWnJOTFpjRWtPVFlwb3cyN3p6akEvSktMM3R3bURESVFSdDUybCtuOWRNcGhSSnNuOHVxb0lsb2FzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9fe7d56-03a8-4c8b-8310-898a16dbc647", "record_id": "flaws_cloudtrail:0000220:d9fe7d56-03a8-4c8b-8310-898a16dbc647", "row_index": 220, "timestamp": "2019-08-20T13:57:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9fe7d56-03a8-4c8b-8310-898a16dbc647", "eventTime": "2019-08-20T13:57:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZYML29G3ZH3RKV3D", "expiration": "Aug 20, 2019 8:23:33 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afdaa232-690e-4bf5-8773-f91c9f3f53b8", "record_id": "flaws_cloudtrail:0000221:afdaa232-690e-4bf5-8773-f91c9f3f53b8", "row_index": 221, "timestamp": "2019-08-20T13:57:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afdaa232-690e-4bf5-8773-f91c9f3f53b8", "eventTime": "2019-08-20T13:57:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1RXluMFlMR29Da0x2MXF1Mm1Ldm5qQmtPQytYbkVYcjlENWhaMWU1SGpYUzBTU2dNanlhcVo5d0hDaWN6eVBzaE5yRGl6c0hqaHJJS0tKejhOVi8wRkc0aWhnWGphdjZUV0FnUGR4NDZMTlFaK1pESE1zTkJDbUpYTWJOK0xjRHRoRXF1cGJ1Zm9zUmsrVkEvOGZIZnc4QXBMaFczTTlPS1lITVJXUTRuWVNVZEZzNTRWQVB5L0t5QzVYbEJicS9YeUphM1VXbW1uR1FVdVBYRmdtdm9nPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afdaa232-690e-4bf5-8773-f91c9f3f53b8", "record_id": "flaws_cloudtrail:0000222:afdaa232-690e-4bf5-8773-f91c9f3f53b8", "row_index": 222, "timestamp": "2019-08-20T13:57:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afdaa232-690e-4bf5-8773-f91c9f3f53b8", "eventTime": "2019-08-20T13:57:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-cli/1.14.62 Python/2.7.9 Windows/8 botocore/1.9.15", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1RXluMFlMR29Da0x2MXF1Mm1Ldm5qQmtPQytYbkVYcjlENWhaMWU1SGpYUzBTU2dNanlhcVo5d0hDaWN6eVBzaE5yRGl6c0hqaHJJS0tKejhOVi8wRkc0aWhnWGphdjZUV0FnUGR4NDZMTlFaK1pESE1zTkJDbUpYTWJOK0xjRHRoRXF1cGJ1Zm9zUmsrVkEvOGZIZnc4QXBMaFczTTlPS1lITVJXUTRuWVNVZEZzNTRWQVB5L0t5QzVYbEJicS9YeUphM1VXbW1uR1FVdVBYRmdtdm9nPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ace219096-8753-42d5-ba72-da26cd70a4a4", "record_id": "flaws_cloudtrail:0000223:ace219096-8753-42d5-ba72-da26cd70a4a4", "row_index": 223, "timestamp": "2019-08-20T14:05:56Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ace219096-8753-42d5-ba72-da26cd70a4a4", "eventTime": "2019-08-20T14:05:56Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ace219096-8753-42d5-ba72-da26cd70a4a4", "record_id": "flaws_cloudtrail:0000224:ace219096-8753-42d5-ba72-da26cd70a4a4", "row_index": 224, "timestamp": "2019-08-20T14:05:56Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ace219096-8753-42d5-ba72-da26cd70a4a4", "eventTime": "2019-08-20T14:05:56Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d1837cc-2500-4b17-94f6-725ab73137a8", "record_id": "flaws_cloudtrail:0000225:7d1837cc-2500-4b17-94f6-725ab73137a8", "row_index": 225, "timestamp": "2019-08-20T14:05:57Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d1837cc-2500-4b17-94f6-725ab73137a8", "eventTime": "2019-08-20T14:05:57Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17020-04aa-4061-90a3-9041e79c96b8", "record_id": "flaws_cloudtrail:0000226:17020-04aa-4061-90a3-9041e79c96b8", "row_index": 226, "timestamp": "2019-08-20T14:05:57Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17020-04aa-4061-90a3-9041e79c96b8", "eventTime": "2019-08-20T14:05:57Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user with name test cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "test"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d1837cc-2500-4b17-94f6-725ab73137a8", "record_id": "flaws_cloudtrail:0000227:7d1837cc-2500-4b17-94f6-725ab73137a8", "row_index": 227, "timestamp": "2019-08-20T14:05:57Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d1837cc-2500-4b17-94f6-725ab73137a8", "eventTime": "2019-08-20T14:05:57Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17020-04aa-4061-90a3-9041e79c96b8", "record_id": "flaws_cloudtrail:0000228:17020-04aa-4061-90a3-9041e79c96b8", "row_index": 228, "timestamp": "2019-08-20T14:05:57Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17020-04aa-4061-90a3-9041e79c96b8", "eventTime": "2019-08-20T14:05:57Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user with name test cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "test"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "827982c66-8818-487c-a845-8619a271aecc", "record_id": "flaws_cloudtrail:0000229:827982c66-8818-487c-a845-8619a271aecc", "row_index": 229, "timestamp": "2019-08-20T14:05:58Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 959, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "827982c66-8818-487c-a845-8619a271aecc", "eventTime": "2019-08-20T14:05:58Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/aws-service-role/support.amazonaws.com/AWSServiceRoleForSupport", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e49c9e70-8407-4026-a34d-e441a23bc40a", "record_id": "flaws_cloudtrail:0000230:e49c9e70-8407-4026-a34d-e441a23bc40a", "row_index": 230, "timestamp": "2019-08-20T14:05:58Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e49c9e70-8407-4026-a34d-e441a23bc40a", "eventTime": "2019-08-20T14:05:58Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/aws-service-role/cloudtrail.amazonaws.com/AWSServiceRoleForCloudTrail", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ced86e43-7722-4ab5-8a6c-29dd93f07b1b", "record_id": "flaws_cloudtrail:0000231:ced86e43-7722-4ab5-8a6c-29dd93f07b1b", "row_index": 231, "timestamp": "2019-08-20T14:05:58Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ced86e43-7722-4ab5-8a6c-29dd93f07b1b", "eventTime": "2019-08-20T14:05:58Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/aws-service-role/organizations.amazonaws.com/AWSServiceRoleForOrganizations", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d83de03-c8bc-4054-804c-48ca3b1c7a41", "record_id": "flaws_cloudtrail:0000232:7d83de03-c8bc-4054-804c-48ca3b1c7a41", "row_index": 232, "timestamp": "2019-08-20T14:05:58Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d83de03-c8bc-4054-804c-48ca3b1c7a41", "eventTime": "2019-08-20T14:05:58Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/aws-service-role/config-multiaccountsetup.amazonaws.com/AWSServiceRoleForConfigMultiAccountSetup", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e6a51d8-eda2-48a3-b036-c895c053c6cc", "record_id": "flaws_cloudtrail:0000233:1e6a51d8-eda2-48a3-b036-c895c053c6cc", "row_index": 233, "timestamp": "2019-08-20T14:05:58Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 931, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e6a51d8-eda2-48a3-b036-c895c053c6cc", "eventTime": "2019-08-20T14:05:58Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "817ac476-1269-4647-9341-456f496bc9a1", "record_id": "flaws_cloudtrail:0000234:817ac476-1269-4647-9341-456f496bc9a1", "row_index": 234, "timestamp": "2019-08-20T14:05:58Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "817ac476-1269-4647-9341-456f496bc9a1", "eventTime": "2019-08-20T14:05:58Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/aws-service-role/trustedadvisor.amazonaws.com/AWSServiceRoleForTrustedAdvisor", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "827982c66-8818-487c-a845-8619a271aecc", "record_id": "flaws_cloudtrail:0000235:827982c66-8818-487c-a845-8619a271aecc", "row_index": 235, "timestamp": "2019-08-20T14:05:58Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 959, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "827982c66-8818-487c-a845-8619a271aecc", "eventTime": "2019-08-20T14:05:58Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/aws-service-role/support.amazonaws.com/AWSServiceRoleForSupport", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e49c9e70-8407-4026-a34d-e441a23bc40a", "record_id": "flaws_cloudtrail:0000236:e49c9e70-8407-4026-a34d-e441a23bc40a", "row_index": 236, "timestamp": "2019-08-20T14:05:58Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 966, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e49c9e70-8407-4026-a34d-e441a23bc40a", "eventTime": "2019-08-20T14:05:58Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/aws-service-role/cloudtrail.amazonaws.com/AWSServiceRoleForCloudTrail", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ced86e43-7722-4ab5-8a6c-29dd93f07b1b", "record_id": "flaws_cloudtrail:0000237:ced86e43-7722-4ab5-8a6c-29dd93f07b1b", "row_index": 237, "timestamp": "2019-08-20T14:05:58Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ced86e43-7722-4ab5-8a6c-29dd93f07b1b", "eventTime": "2019-08-20T14:05:58Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/aws-service-role/organizations.amazonaws.com/AWSServiceRoleForOrganizations", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d83de03-c8bc-4054-804c-48ca3b1c7a41", "record_id": "flaws_cloudtrail:0000238:7d83de03-c8bc-4054-804c-48ca3b1c7a41", "row_index": 238, "timestamp": "2019-08-20T14:05:58Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d83de03-c8bc-4054-804c-48ca3b1c7a41", "eventTime": "2019-08-20T14:05:58Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/aws-service-role/config-multiaccountsetup.amazonaws.com/AWSServiceRoleForConfigMultiAccountSetup", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e6a51d8-eda2-48a3-b036-c895c053c6cc", "record_id": "flaws_cloudtrail:0000239:1e6a51d8-eda2-48a3-b036-c895c053c6cc", "row_index": 239, "timestamp": "2019-08-20T14:05:58Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 931, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e6a51d8-eda2-48a3-b036-c895c053c6cc", "eventTime": "2019-08-20T14:05:58Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "817ac476-1269-4647-9341-456f496bc9a1", "record_id": "flaws_cloudtrail:0000240:817ac476-1269-4647-9341-456f496bc9a1", "row_index": 240, "timestamp": "2019-08-20T14:05:58Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "817ac476-1269-4647-9341-456f496bc9a1", "eventTime": "2019-08-20T14:05:58Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/aws-service-role/trustedadvisor.amazonaws.com/AWSServiceRoleForTrustedAdvisor", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f70e468-17f7-41a9-8481-1470c159b55e", "record_id": "flaws_cloudtrail:0000241:6f70e468-17f7-41a9-8481-1470c159b55e", "row_index": 241, "timestamp": "2019-08-20T14:05:59Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 916, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f70e468-17f7-41a9-8481-1470c159b55e", "eventTime": "2019-08-20T14:05:59Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/service-role/Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "061fa58a-f0d4-4249-9059-cf0c97efefbf", "record_id": "flaws_cloudtrail:0000242:061fa58a-f0d4-4249-9059-cf0c97efefbf", "row_index": 242, "timestamp": "2019-08-20T14:05:59Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "061fa58a-f0d4-4249-9059-cf0c97efefbf", "eventTime": "2019-08-20T14:05:59Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/SecurityMonkey", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7a767a7-5f58-4235-9e05-102f25d29c79", "record_id": "flaws_cloudtrail:0000243:b7a767a7-5f58-4235-9e05-102f25d29c79", "row_index": 243, "timestamp": "2019-08-20T14:05:59Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7a767a7-5f58-4235-9e05-102f25d29c79", "eventTime": "2019-08-20T14:05:59Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/SummitRouteAudit", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f7156a7-f1bc-4599-9fe5-a30779d45884", "record_id": "flaws_cloudtrail:0000244:9f7156a7-f1bc-4599-9fe5-a30779d45884", "row_index": 244, "timestamp": "2019-08-20T14:05:59Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 903, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f7156a7-f1bc-4599-9fe5-a30779d45884", "eventTime": "2019-08-20T14:05:59Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/flaws", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f70e468-17f7-41a9-8481-1470c159b55e", "record_id": "flaws_cloudtrail:0000245:6f70e468-17f7-41a9-8481-1470c159b55e", "row_index": 245, "timestamp": "2019-08-20T14:05:59Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 916, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f70e468-17f7-41a9-8481-1470c159b55e", "eventTime": "2019-08-20T14:05:59Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/service-role/Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "061fa58a-f0d4-4249-9059-cf0c97efefbf", "record_id": "flaws_cloudtrail:0000246:061fa58a-f0d4-4249-9059-cf0c97efefbf", "row_index": 246, "timestamp": "2019-08-20T14:05:59Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 911, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "061fa58a-f0d4-4249-9059-cf0c97efefbf", "eventTime": "2019-08-20T14:05:59Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/SecurityMonkey", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7a767a7-5f58-4235-9e05-102f25d29c79", "record_id": "flaws_cloudtrail:0000247:b7a767a7-5f58-4235-9e05-102f25d29c79", "row_index": 247, "timestamp": "2019-08-20T14:05:59Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 913, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7a767a7-5f58-4235-9e05-102f25d29c79", "eventTime": "2019-08-20T14:05:59Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/SummitRouteAudit", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f7156a7-f1bc-4599-9fe5-a30779d45884", "record_id": "flaws_cloudtrail:0000248:9f7156a7-f1bc-4599-9fe5-a30779d45884", "row_index": 248, "timestamp": "2019-08-20T14:05:59Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 903, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f7156a7-f1bc-4599-9fe5-a30779d45884", "eventTime": "2019-08-20T14:05:59Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:role/flaws", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e9e11e8-6740-428f-9091-b6a1ab4399a8", "record_id": "flaws_cloudtrail:0000249:4e9e11e8-6740-428f-9091-b6a1ab4399a8", "row_index": 249, "timestamp": "2019-08-20T14:06:00Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 903, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e9e11e8-6740-428f-9091-b6a1ab4399a8", "eventTime": "2019-08-20T14:06:00Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:user/backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1d2e6ee-d500-4b1e-979b-6c057a468871", "record_id": "flaws_cloudtrail:0000250:f1d2e6ee-d500-4b1e-979b-6c057a468871", "row_index": 250, "timestamp": "2019-08-20T14:06:00Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 903, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1d2e6ee-d500-4b1e-979b-6c057a468871", "eventTime": "2019-08-20T14:06:00Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:user/Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7673c95f-c3de-463d-8091-f0c75186cb", "record_id": "flaws_cloudtrail:0000251:7673c95f-c3de-463d-8091-f0c75186cb", "row_index": 251, "timestamp": "2019-08-20T14:06:00Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7673c95f-c3de-463d-8091-f0c75186cb", "eventTime": "2019-08-20T14:06:00Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e9e11e8-6740-428f-9091-b6a1ab4399a8", "record_id": "flaws_cloudtrail:0000252:4e9e11e8-6740-428f-9091-b6a1ab4399a8", "row_index": 252, "timestamp": "2019-08-20T14:06:00Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 903, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e9e11e8-6740-428f-9091-b6a1ab4399a8", "eventTime": "2019-08-20T14:06:00Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:user/backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1d2e6ee-d500-4b1e-979b-6c057a468871", "record_id": "flaws_cloudtrail:0000253:f1d2e6ee-d500-4b1e-979b-6c057a468871", "row_index": 253, "timestamp": "2019-08-20T14:06:00Z", "event_type": "GenerateServiceLastAccessedDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 903, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1d2e6ee-d500-4b1e-979b-6c057a468871", "eventTime": "2019-08-20T14:06:00Z", "eventName": "GenerateServiceLastAccessedDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: iam:GenerateServiceLastAccessedDetails on resource: arn:aws:iam::811596193553:user/Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7673c95f-c3de-463d-8091-f0c75186cb", "record_id": "flaws_cloudtrail:0000254:7673c95f-c3de-463d-8091-f0c75186cb", "row_index": 254, "timestamp": "2019-08-20T14:06:00Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7673c95f-c3de-463d-8091-f0c75186cb", "eventTime": "2019-08-20T14:06:00Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc5b6ee0-3230-470d-b3d3-cfa3f5d5f4d7", "record_id": "flaws_cloudtrail:0000255:fc5b6ee0-3230-470d-b3d3-cfa3f5d5f4d7", "row_index": 255, "timestamp": "2019-08-20T14:06:01Z", "event_type": "GetAccountPublicAccessBlock", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "[Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc5b6ee0-3230-470d-b3d3-cfa3f5d5f4d7", "eventTime": "2019-08-20T14:06:01Z", "eventName": "GetAccountPublicAccessBlock", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "[Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["811596193553.s3-control.us-east-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc5b6ee0-3230-470d-b3d3-cfa3f5d5f4d7", "record_id": "flaws_cloudtrail:0000256:fc5b6ee0-3230-470d-b3d3-cfa3f5d5f4d7", "row_index": 256, "timestamp": "2019-08-20T14:06:01Z", "event_type": "GetAccountPublicAccessBlock", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "[Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc5b6ee0-3230-470d-b3d3-cfa3f5d5f4d7", "eventTime": "2019-08-20T14:06:01Z", "eventName": "GetAccountPublicAccessBlock", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "[Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["811596193553.s3-control.us-east-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a1a8f3a-9086-4fe2-8bcc-4fce09cf6c73", "record_id": "flaws_cloudtrail:0000257:1a1a8f3a-9086-4fe2-8bcc-4fce09cf6c73", "row_index": 257, "timestamp": "2019-08-20T14:06:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "[Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 957, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a1a8f3a-9086-4fe2-8bcc-4fce09cf6c73", "eventTime": "2019-08-20T14:06:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "[Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a1a8f3a-9086-4fe2-8bcc-4fce09cf6c73", "record_id": "flaws_cloudtrail:0000258:1a1a8f3a-9086-4fe2-8bcc-4fce09cf6c73", "row_index": 258, "timestamp": "2019-08-20T14:06:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "[Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 957, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a1a8f3a-9086-4fe2-8bcc-4fce09cf6c73", "eventTime": "2019-08-20T14:06:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "[Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4808f662-2c68-46e9-82ee-050ac25618e3", "record_id": "flaws_cloudtrail:0000259:4808f662-2c68-46e9-82ee-050ac25618e3", "row_index": 259, "timestamp": "2019-08-20T14:06:04Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "[Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 958, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4808f662-2c68-46e9-82ee-050ac25618e3", "eventTime": "2019-08-20T14:06:04Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "[Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4808f662-2c68-46e9-82ee-050ac25618e3", "record_id": "flaws_cloudtrail:0000260:4808f662-2c68-46e9-82ee-050ac25618e3", "row_index": 260, "timestamp": "2019-08-20T14:06:04Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "[Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 958, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4808f662-2c68-46e9-82ee-050ac25618e3", "eventTime": "2019-08-20T14:06:04Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "[Boto3/1.9.145 Python/3.7.3 Linux/4.15.0-55-generic Botocore/1.12.211]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a40f2f61-390e-4289-9766-c1a1b61ff1ea", "record_id": "flaws_cloudtrail:0000261:a40f2f61-390e-4289-9766-c1a1b61ff1ea", "row_index": 261, "timestamp": "2019-08-20T14:06:46Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a40f2f61-390e-4289-9766-c1a1b61ff1ea", "eventTime": "2019-08-20T14:06:46Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1c7e011-cf37-4c12-b05e-9f41d600ce95", "record_id": "flaws_cloudtrail:0000262:a1c7e011-cf37-4c12-b05e-9f41d600ce95", "row_index": 262, "timestamp": "2019-08-20T14:06:46Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "80.97.253.228", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1c7e011-cf37-4c12-b05e-9f41d600ce95", "eventTime": "2019-08-20T14:06:46Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "80.97.253.228", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a40f2f61-390e-4289-9766-c1a1b61ff1ea", "record_id": "flaws_cloudtrail:0000263:a40f2f61-390e-4289-9766-c1a1b61ff1ea", "row_index": 263, "timestamp": "2019-08-20T14:06:46Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a40f2f61-390e-4289-9766-c1a1b61ff1ea", "eventTime": "2019-08-20T14:06:46Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1c7e011-cf37-4c12-b05e-9f41d600ce95", "record_id": "flaws_cloudtrail:0000264:a1c7e011-cf37-4c12-b05e-9f41d600ce95", "row_index": 264, "timestamp": "2019-08-20T14:06:46Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "80.97.253.228", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1c7e011-cf37-4c12-b05e-9f41d600ce95", "eventTime": "2019-08-20T14:06:46Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "80.97.253.228", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdbc6cdf-a8ff-4351-b503-d4eb6f1fa9b9", "record_id": "flaws_cloudtrail:0000265:fdbc6cdf-a8ff-4351-b503-d4eb6f1fa9b9", "row_index": 265, "timestamp": "2019-08-20T14:06:58Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIATIC8JZUWPMFWPF7Y", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "23.57.91.50", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 502, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdbc6cdf-a8ff-4351-b503-d4eb6f1fa9b9", "eventTime": "2019-08-20T14:06:58Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "23.57.91.50", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIATIC8JZUWPMFWPF7Y", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14cc0f48-870c-41ee-8b97-d8fb1cf7ee1c", "record_id": "flaws_cloudtrail:0000266:14cc0f48-870c-41ee-8b97-d8fb1cf7ee1c", "row_index": 266, "timestamp": "2019-08-20T14:07:21Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14cc0f48-870c-41ee-8b97-d8fb1cf7ee1c", "eventTime": "2019-08-20T14:07:21Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14cc0f48-870c-41ee-8b97-d8fb1cf7ee1c", "record_id": "flaws_cloudtrail:0000267:14cc0f48-870c-41ee-8b97-d8fb1cf7ee1c", "row_index": 267, "timestamp": "2019-08-20T14:07:21Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14cc0f48-870c-41ee-8b97-d8fb1cf7ee1c", "eventTime": "2019-08-20T14:07:21Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a26d6ef6-5262-435a-8749-e5c4da35eba6", "record_id": "flaws_cloudtrail:0000268:a26d6ef6-5262-435a-8749-e5c4da35eba6", "row_index": 268, "timestamp": "2019-08-20T14:08:10Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIATIC8JZUWPMFWPF7Y", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "23.57.91.50", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 531, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a26d6ef6-5262-435a-8749-e5c4da35eba6", "eventTime": "2019-08-20T14:08:10Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "23.57.91.50", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIATIC8JZUWPMFWPF7Y", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4e76d8d-add9-465f-9b8f-4ba41452726d", "record_id": "flaws_cloudtrail:0000269:c4e76d8d-add9-465f-9b8f-4ba41452726d", "row_index": 269, "timestamp": "2019-08-20T14:08:27Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4e76d8d-add9-465f-9b8f-4ba41452726d", "eventTime": "2019-08-20T14:08:27Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4e76d8d-add9-465f-9b8f-4ba41452726d", "record_id": "flaws_cloudtrail:0000270:c4e76d8d-add9-465f-9b8f-4ba41452726d", "row_index": 270, "timestamp": "2019-08-20T14:08:27Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4e76d8d-add9-465f-9b8f-4ba41452726d", "eventTime": "2019-08-20T14:08:27Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fb5c0b7-c2e2-457c-a67c-35bba8cc456d", "record_id": "flaws_cloudtrail:0000271:0fb5c0b7-c2e2-457c-a67c-35bba8cc456d", "row_index": 271, "timestamp": "2019-08-20T14:09:00Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fb5c0b7-c2e2-457c-a67c-35bba8cc456d", "eventTime": "2019-08-20T14:09:00Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fb5c0b7-c2e2-457c-a67c-35bba8cc456d", "record_id": "flaws_cloudtrail:0000272:0fb5c0b7-c2e2-457c-a67c-35bba8cc456d", "row_index": 272, "timestamp": "2019-08-20T14:09:00Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fb5c0b7-c2e2-457c-a67c-35bba8cc456d", "eventTime": "2019-08-20T14:09:00Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83da46e2-14db-4f1f-9f74-dc30f562549f", "record_id": "flaws_cloudtrail:0000273:83da46e2-14db-4f1f-9f74-dc30f562549f", "row_index": 273, "timestamp": "2019-08-20T14:09:13Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83da46e2-14db-4f1f-9f74-dc30f562549f", "eventTime": "2019-08-20T14:09:13Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83da46e2-14db-4f1f-9f74-dc30f562549f", "record_id": "flaws_cloudtrail:0000274:83da46e2-14db-4f1f-9f74-dc30f562549f", "row_index": 274, "timestamp": "2019-08-20T14:09:13Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83da46e2-14db-4f1f-9f74-dc30f562549f", "eventTime": "2019-08-20T14:09:13Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fda2f08-9b1b-4167-8a3e-6a39900bc697", "record_id": "flaws_cloudtrail:0000275:0fda2f08-9b1b-4167-8a3e-6a39900bc697", "row_index": 275, "timestamp": "2019-08-20T14:10:38Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIATIC8JZUWPMFWPF7Y", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "23.57.91.50", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 551, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fda2f08-9b1b-4167-8a3e-6a39900bc697", "eventTime": "2019-08-20T14:10:38Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "23.57.91.50", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIATIC8JZUWPMFWPF7Y", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00aeb829-670b-4afd-ad8b-e51ef4d242c0", "record_id": "flaws_cloudtrail:0000276:00aeb829-670b-4afd-ad8b-e51ef4d242c0", "row_index": 276, "timestamp": "2019-08-20T14:10:53Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00aeb829-670b-4afd-ad8b-e51ef4d242c0", "eventTime": "2019-08-20T14:10:53Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00aeb829-670b-4afd-ad8b-e51ef4d242c0", "record_id": "flaws_cloudtrail:0000277:00aeb829-670b-4afd-ad8b-e51ef4d242c0", "row_index": 277, "timestamp": "2019-08-20T14:10:53Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00aeb829-670b-4afd-ad8b-e51ef4d242c0", "eventTime": "2019-08-20T14:10:53Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35f5f7e3-da6e-4795-b32b-4f8a21f0e1c2", "record_id": "flaws_cloudtrail:0000278:35f5f7e3-da6e-4795-b32b-4f8a21f0e1c2", "row_index": 278, "timestamp": "2019-08-20T14:11:04Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35f5f7e3-da6e-4795-b32b-4f8a21f0e1c2", "eventTime": "2019-08-20T14:11:04Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35f5f7e3-da6e-4795-b32b-4f8a21f0e1c2", "record_id": "flaws_cloudtrail:0000279:35f5f7e3-da6e-4795-b32b-4f8a21f0e1c2", "row_index": 279, "timestamp": "2019-08-20T14:11:04Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35f5f7e3-da6e-4795-b32b-4f8a21f0e1c2", "eventTime": "2019-08-20T14:11:04Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ecf30e7-0de3-4bce-a7d3-6fc6dc9377a0", "record_id": "flaws_cloudtrail:0000280:2ecf30e7-0de3-4bce-a7d3-6fc6dc9377a0", "row_index": 280, "timestamp": "2019-08-20T14:11:19Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ecf30e7-0de3-4bce-a7d3-6fc6dc9377a0", "eventTime": "2019-08-20T14:11:19Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ecf30e7-0de3-4bce-a7d3-6fc6dc9377a0", "record_id": "flaws_cloudtrail:0000281:2ecf30e7-0de3-4bce-a7d3-6fc6dc9377a0", "row_index": 281, "timestamp": "2019-08-20T14:11:19Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ecf30e7-0de3-4bce-a7d3-6fc6dc9377a0", "eventTime": "2019-08-20T14:11:19Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7438d6b-5339-4b18-9067-50a72ff28e0f", "record_id": "flaws_cloudtrail:0000282:b7438d6b-5339-4b18-9067-50a72ff28e0f", "row_index": 282, "timestamp": "2019-08-20T14:11:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7438d6b-5339-4b18-9067-50a72ff28e0f", "eventTime": "2019-08-20T14:11:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAT89OT8D8GSJR8WQG", "expiration": "Aug 21, 2019 2:11:33 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0295d4a2-9ea2-41ae-be31-a89514ecb5f4", "record_id": "flaws_cloudtrail:0000283:0295d4a2-9ea2-41ae-be31-a89514ecb5f4", "row_index": 283, "timestamp": "2019-08-20T14:11:33Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAT89OT8D8GSJR8WQG", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "216.0.250.251", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0295d4a2-9ea2-41ae-be31-a89514ecb5f4", "eventTime": "2019-08-20T14:11:33Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "216.0.250.251", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAT89OT8D8GSJR8WQG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-20T14:11:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/08/20/[$LATEST]bfa56114e7ef273342d0d7063c685b07"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4b400ed-409e-4d45-9e5a-c2315d8abe92", "record_id": "flaws_cloudtrail:0000284:c4b400ed-409e-4d45-9e5a-c2315d8abe92", "row_index": 284, "timestamp": "2019-08-20T14:11:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4b400ed-409e-4d45-9e5a-c2315d8abe92", "eventTime": "2019-08-20T14:11:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIANJJEIACG97FE3E7L", "expiration": "Aug 21, 2019 2:11:33 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7438d6b-5339-4b18-9067-50a72ff28e0f", "record_id": "flaws_cloudtrail:0000285:b7438d6b-5339-4b18-9067-50a72ff28e0f", "row_index": 285, "timestamp": "2019-08-20T14:11:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7438d6b-5339-4b18-9067-50a72ff28e0f", "eventTime": "2019-08-20T14:11:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAT89OT8D8GSJR8WQG", "expiration": "Aug 21, 2019 2:11:33 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0295d4a2-9ea2-41ae-be31-a89514ecb5f4", "record_id": "flaws_cloudtrail:0000286:0295d4a2-9ea2-41ae-be31-a89514ecb5f4", "row_index": 286, "timestamp": "2019-08-20T14:11:33Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAT89OT8D8GSJR8WQG", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "216.0.250.251", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0295d4a2-9ea2-41ae-be31-a89514ecb5f4", "eventTime": "2019-08-20T14:11:33Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "216.0.250.251", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAT89OT8D8GSJR8WQG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-20T14:11:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/08/20/[$LATEST]bfa56114e7ef273342d0d7063c685b07"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4b400ed-409e-4d45-9e5a-c2315d8abe92", "record_id": "flaws_cloudtrail:0000287:c4b400ed-409e-4d45-9e5a-c2315d8abe92", "row_index": 287, "timestamp": "2019-08-20T14:11:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1618, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4b400ed-409e-4d45-9e5a-c2315d8abe92", "eventTime": "2019-08-20T14:11:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIANJJEIACG97FE3E7L", "expiration": "Aug 21, 2019 2:11:33 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1be9bf1f-8e20-4249-b5c5-97c5d779fc8b", "record_id": "flaws_cloudtrail:0000288:1be9bf1f-8e20-4249-b5c5-97c5d779fc8b", "row_index": 288, "timestamp": "2019-08-20T14:11:39Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1be9bf1f-8e20-4249-b5c5-97c5d779fc8b", "eventTime": "2019-08-20T14:11:39Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1be9bf1f-8e20-4249-b5c5-97c5d779fc8b", "record_id": "flaws_cloudtrail:0000289:1be9bf1f-8e20-4249-b5c5-97c5d779fc8b", "row_index": 289, "timestamp": "2019-08-20T14:11:39Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1be9bf1f-8e20-4249-b5c5-97c5d779fc8b", "eventTime": "2019-08-20T14:11:39Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:eu-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84bec5f3-6271-4cce-be54-4d4c22de7258", "record_id": "flaws_cloudtrail:0000290:84bec5f3-6271-4cce-be54-4d4c22de7258", "row_index": 290, "timestamp": "2019-08-20T14:11:43Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84bec5f3-6271-4cce-be54-4d4c22de7258", "eventTime": "2019-08-20T14:11:43Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84bec5f3-6271-4cce-be54-4d4c22de7258", "record_id": "flaws_cloudtrail:0000291:84bec5f3-6271-4cce-be54-4d4c22de7258", "row_index": 291, "timestamp": "2019-08-20T14:11:43Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.156.211.83", "user_agent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84bec5f3-6271-4cce-be54-4d4c22de7258", "eventTime": "2019-08-20T14:11:43Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.156.211.83", "userAgent": "aws-cli/1.16.215 Python/3.6.8 Linux/4.15.0-55-generic botocore/1.12.205", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ca9b792-7149-4ee5-bd5f-a05255d438a4", "record_id": "flaws_cloudtrail:0000292:7ca9b792-7149-4ee5-bd5f-a05255d438a4", "row_index": 292, "timestamp": "2019-08-20T14:12:06Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIATIC8JZUWPMFWPF7Y", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "23.57.91.50", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 534, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ca9b792-7149-4ee5-bd5f-a05255d438a4", "eventTime": "2019-08-20T14:12:06Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "23.57.91.50", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIATIC8JZUWPMFWPF7Y", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a79dff42-cf62-415e-af3c-77c865b9e0cc", "record_id": "flaws_cloudtrail:0000293:a79dff42-cf62-415e-af3c-77c865b9e0cc", "row_index": 293, "timestamp": "2019-08-20T14:13:56Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "80.97.253.228", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a79dff42-cf62-415e-af3c-77c865b9e0cc", "eventTime": "2019-08-20T14:13:56Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "80.97.253.228", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a79dff42-cf62-415e-af3c-77c865b9e0cc", "record_id": "flaws_cloudtrail:0000294:a79dff42-cf62-415e-af3c-77c865b9e0cc", "row_index": 294, "timestamp": "2019-08-20T14:13:56Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "80.97.253.228", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a79dff42-cf62-415e-af3c-77c865b9e0cc", "eventTime": "2019-08-20T14:13:56Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "80.97.253.228", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7da30c2b-1b81-42da-b307-1df57666bc1", "record_id": "flaws_cloudtrail:0000295:7da30c2b-1b81-42da-b307-1df57666bc1", "row_index": 295, "timestamp": "2019-08-20T14:14:35Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "27.33.198.254", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7da30c2b-1b81-42da-b307-1df57666bc1", "eventTime": "2019-08-20T14:14:35Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.33.198.254", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7da30c2b-1b81-42da-b307-1df57666bc1", "record_id": "flaws_cloudtrail:0000296:7da30c2b-1b81-42da-b307-1df57666bc1", "row_index": 296, "timestamp": "2019-08-20T14:14:35Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "27.33.198.254", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7da30c2b-1b81-42da-b307-1df57666bc1", "eventTime": "2019-08-20T14:14:35Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.33.198.254", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c5e29c2-d66e-44b4-bf51-6c5f3f1ae487", "record_id": "flaws_cloudtrail:0000297:9c5e29c2-d66e-44b4-bf51-6c5f3f1ae487", "row_index": 297, "timestamp": "2019-08-20T14:14:46Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "27.33.198.254", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c5e29c2-d66e-44b4-bf51-6c5f3f1ae487", "eventTime": "2019-08-20T14:14:46Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.33.198.254", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c5e29c2-d66e-44b4-bf51-6c5f3f1ae487", "record_id": "flaws_cloudtrail:0000298:9c5e29c2-d66e-44b4-bf51-6c5f3f1ae487", "row_index": 298, "timestamp": "2019-08-20T14:14:46Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "27.33.198.254", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c5e29c2-d66e-44b4-bf51-6c5f3f1ae487", "eventTime": "2019-08-20T14:14:46Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.33.198.254", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e22f79d-0b73-48b4-81a9-2ddfdb4c5bb5", "record_id": "flaws_cloudtrail:0000299:3e22f79d-0b73-48b4-81a9-2ddfdb4c5bb5", "row_index": 299, "timestamp": "2019-08-20T14:15:09Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "27.33.198.254", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e22f79d-0b73-48b4-81a9-2ddfdb4c5bb5", "eventTime": "2019-08-20T14:15:09Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.33.198.254", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e22f79d-0b73-48b4-81a9-2ddfdb4c5bb5", "record_id": "flaws_cloudtrail:0000300:3e22f79d-0b73-48b4-81a9-2ddfdb4c5bb5", "row_index": 300, "timestamp": "2019-08-20T14:15:09Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "27.33.198.254", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e22f79d-0b73-48b4-81a9-2ddfdb4c5bb5", "eventTime": "2019-08-20T14:15:09Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.33.198.254", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/MySecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "591b6ac8-c76f-48f8-a8f1-d0fc11223e5", "record_id": "flaws_cloudtrail:0000301:591b6ac8-c76f-48f8-a8f1-d0fc11223e5", "row_index": 301, "timestamp": "2019-08-20T14:15:14Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "27.33.198.254", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "591b6ac8-c76f-48f8-a8f1-d0fc11223e5", "eventTime": "2019-08-20T14:15:14Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.33.198.254", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "591b6ac8-c76f-48f8-a8f1-d0fc11223e5", "record_id": "flaws_cloudtrail:0000302:591b6ac8-c76f-48f8-a8f1-d0fc11223e5", "row_index": 302, "timestamp": "2019-08-20T14:15:14Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "27.33.198.254", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "591b6ac8-c76f-48f8-a8f1-d0fc11223e5", "eventTime": "2019-08-20T14:15:14Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.33.198.254", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee946f02-6a1a-4eef-bd14-04e04485a9ed", "record_id": "flaws_cloudtrail:0000303:ee946f02-6a1a-4eef-bd14-04e04485a9ed", "row_index": 303, "timestamp": "2019-08-20T14:16:15Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "27.33.198.254", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee946f02-6a1a-4eef-bd14-04e04485a9ed", "eventTime": "2019-08-20T14:16:15Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.33.198.254", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee946f02-6a1a-4eef-bd14-04e04485a9ed", "record_id": "flaws_cloudtrail:0000304:ee946f02-6a1a-4eef-bd14-04e04485a9ed", "row_index": 304, "timestamp": "2019-08-20T14:16:15Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "27.33.198.254", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee946f02-6a1a-4eef-bd14-04e04485a9ed", "eventTime": "2019-08-20T14:16:15Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.33.198.254", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed493429-bae3-44b0-9849-5448c13f8cf0", "record_id": "flaws_cloudtrail:0000305:ed493429-bae3-44b0-9849-5448c13f8cf0", "row_index": 305, "timestamp": "2019-08-20T14:16:25Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "27.33.198.254", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed493429-bae3-44b0-9849-5448c13f8cf0", "eventTime": "2019-08-20T14:16:25Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.33.198.254", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed493429-bae3-44b0-9849-5448c13f8cf0", "record_id": "flaws_cloudtrail:0000306:ed493429-bae3-44b0-9849-5448c13f8cf0", "row_index": 306, "timestamp": "2019-08-20T14:16:25Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "27.33.198.254", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed493429-bae3-44b0-9849-5448c13f8cf0", "eventTime": "2019-08-20T14:16:25Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "27.33.198.254", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56d625e4-0c95-43e7-93df-d860de017fbd", "record_id": "flaws_cloudtrail:0000307:56d625e4-0c95-43e7-93df-d860de017fbd", "row_index": 307, "timestamp": "2019-08-20T14:16:31Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIATIC8JZUWPMFWPF7Y", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "23.57.91.50", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/Level6-elevated-88"], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56d625e4-0c95-43e7-93df-d860de017fbd", "eventTime": "2019-08-20T14:16:31Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "23.57.91.50", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIATIC8JZUWPMFWPF7Y", "userName": "Level6"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/Level6-elevated-88", "roleSessionName": "Level6-session"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/Level6-elevated-88"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bebc77c-016f-4979-8ea5-59fb902ff352", "record_id": "flaws_cloudtrail:0000308:6bebc77c-016f-4979-8ea5-59fb902ff352", "row_index": 308, "timestamp": "2019-08-20T14:17:01Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.3.253.113", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 887, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bebc77c-016f-4979-8ea5-59fb902ff352", "eventTime": "2019-08-20T14:17:01Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.3.253.113", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bebc77c-016f-4979-8ea5-59fb902ff352", "record_id": "flaws_cloudtrail:0000309:6bebc77c-016f-4979-8ea5-59fb902ff352", "row_index": 309, "timestamp": "2019-08-20T14:17:01Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.3.253.113", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 887, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bebc77c-016f-4979-8ea5-59fb902ff352", "eventTime": "2019-08-20T14:17:01Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.3.253.113", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "345de070-918d-41da-8609-4916b03f43d5", "record_id": "flaws_cloudtrail:0000310:345de070-918d-41da-8609-4916b03f43d5", "row_index": 310, "timestamp": "2019-08-20T14:17:25Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIATIC8JZUWPMFWPF7Y", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "23.57.91.50", "user_agent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-7326"], "raw_record_size_bytes": 621, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "345de070-918d-41da-8609-4916b03f43d5", "eventTime": "2019-08-20T14:17:25Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "23.57.91.50", "userAgent": "Botocore/1.21.21 Python/3.8.10 Linux/5.4.0-90-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIATIC8JZUWPMFWPF7Y", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-7326", "key": "reports/299.csv"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-7326"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50ac3da3-ed89-4e2b-b956-257b2fc17eab", "record_id": "flaws_cloudtrail:0000311:50ac3da3-ed89-4e2b-b956-257b2fc17eab", "row_index": 311, "timestamp": "2019-08-20T14:20:36Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.3.253.113", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50ac3da3-ed89-4e2b-b956-257b2fc17eab", "eventTime": "2019-08-20T14:20:36Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.3.253.113", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:arn:aws:apigateway:us-west-2::/restapis/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "arn:aws:apigateway:us-west-2::/restapis/*", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50ac3da3-ed89-4e2b-b956-257b2fc17eab", "record_id": "flaws_cloudtrail:0000312:50ac3da3-ed89-4e2b-b956-257b2fc17eab", "row_index": 312, "timestamp": "2019-08-20T14:20:36Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.3.253.113", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 909, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50ac3da3-ed89-4e2b-b956-257b2fc17eab", "eventTime": "2019-08-20T14:20:36Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.3.253.113", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:arn:aws:apigateway:us-west-2::/restapis/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "arn:aws:apigateway:us-west-2::/restapis/*", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "313e3f18-aaa3-4b74-a05e-c400f7d4636f", "record_id": "flaws_cloudtrail:0000313:313e3f18-aaa3-4b74-a05e-c400f7d4636f", "row_index": 313, "timestamp": "2019-08-20T14:20:52Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.234.250.134", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 919, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "313e3f18-aaa3-4b74-a05e-c400f7d4636f", "eventTime": "2019-08-20T14:20:52Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.234.250.134", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:arn:aws:apigateway:us-west-2::/restapis/flaws", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "arn:aws:apigateway:us-west-2::/restapis/flaws", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "313e3f18-aaa3-4b74-a05e-c400f7d4636f", "record_id": "flaws_cloudtrail:0000314:313e3f18-aaa3-4b74-a05e-c400f7d4636f", "row_index": 314, "timestamp": "2019-08-20T14:20:52Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.234.250.134", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 919, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "313e3f18-aaa3-4b74-a05e-c400f7d4636f", "eventTime": "2019-08-20T14:20:52Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.234.250.134", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:arn:aws:apigateway:us-west-2::/restapis/flaws", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "arn:aws:apigateway:us-west-2::/restapis/flaws", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c87ad4e8-3267-45f2-a642-d7a078d65b26", "record_id": "flaws_cloudtrail:0000315:c87ad4e8-3267-45f2-a642-d7a078d65b26", "row_index": 315, "timestamp": "2019-08-20T14:22:29Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.253.2.169", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c87ad4e8-3267-45f2-a642-d7a078d65b26", "eventTime": "2019-08-20T14:22:29Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.253.2.169", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c87ad4e8-3267-45f2-a642-d7a078d65b26", "record_id": "flaws_cloudtrail:0000316:c87ad4e8-3267-45f2-a642-d7a078d65b26", "row_index": 316, "timestamp": "2019-08-20T14:22:29Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.253.2.169", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c87ad4e8-3267-45f2-a642-d7a078d65b26", "eventTime": "2019-08-20T14:22:29Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.253.2.169", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6dc9132-1d35-40ec-873e-3b7c169b54bc", "record_id": "flaws_cloudtrail:0000317:c6dc9132-1d35-40ec-873e-3b7c169b54bc", "row_index": 317, "timestamp": "2019-08-20T14:23:21Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.3.253.113", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6dc9132-1d35-40ec-873e-3b7c169b54bc", "eventTime": "2019-08-20T14:23:21Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.3.253.113", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:arn:aws:apigateway:us-west-2::/restapis/s33ppypa75", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "arn:aws:apigateway:us-west-2::/restapis/s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6dc9132-1d35-40ec-873e-3b7c169b54bc", "record_id": "flaws_cloudtrail:0000318:c6dc9132-1d35-40ec-873e-3b7c169b54bc", "row_index": 318, "timestamp": "2019-08-20T14:23:21Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.3.253.113", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6dc9132-1d35-40ec-873e-3b7c169b54bc", "eventTime": "2019-08-20T14:23:21Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.3.253.113", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-west-2", "errorCode": "NotFoundException", "errorMessage": "Invalid API identifier specified 811596193553:arn:aws:apigateway:us-west-2::/restapis/s33ppypa75", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "arn:aws:apigateway:us-west-2::/restapis/s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b3b78a5-859f-43be-b540-c448b355227bb", "record_id": "flaws_cloudtrail:0000319:8b3b78a5-859f-43be-b540-c448b355227bb", "row_index": 319, "timestamp": "2019-08-20T14:23:49Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.3.253.113", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b3b78a5-859f-43be-b540-c448b355227bb", "eventTime": "2019-08-20T14:23:49Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.3.253.113", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b3b78a5-859f-43be-b540-c448b355227bb", "record_id": "flaws_cloudtrail:0000320:8b3b78a5-859f-43be-b540-c448b355227bb", "row_index": 320, "timestamp": "2019-08-20T14:23:49Z", "event_type": "GetResources", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.3.253.113", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b3b78a5-859f-43be-b540-c448b355227bb", "eventTime": "2019-08-20T14:23:49Z", "eventName": "GetResources", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.3.253.113", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81db195a-d8b0-4ebb-b7c9-9b3978c0c101", "record_id": "flaws_cloudtrail:0000321:81db195a-d8b0-4ebb-b7c9-9b3978c0c101", "row_index": 321, "timestamp": "2019-08-20T14:24:47Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.3.253.113", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81db195a-d8b0-4ebb-b7c9-9b3978c0c101", "eventTime": "2019-08-20T14:24:47Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.3.253.113", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81db195a-d8b0-4ebb-b7c9-9b3978c0c101", "record_id": "flaws_cloudtrail:0000322:81db195a-d8b0-4ebb-b7c9-9b3978c0c101", "row_index": 322, "timestamp": "2019-08-20T14:24:47Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.3.253.113", "user_agent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81db195a-d8b0-4ebb-b7c9-9b3978c0c101", "eventTime": "2019-08-20T14:24:47Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.3.253.113", "userAgent": "aws-cli/1.16.140 Python/2.7.15rc1 Linux/4.15.0-55-generic botocore/1.12.202", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cbe287e-dd86-4ba6-a81a-c7c85a9789a6", "record_id": "flaws_cloudtrail:0000323:9cbe287e-dd86-4ba6-a81a-c7c85a9789a6", "row_index": 323, "timestamp": "2019-08-20T14:25:42Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAT89OT8D8GSJR8WQG", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "68.255.1.254", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cbe287e-dd86-4ba6-a81a-c7c85a9789a6", "eventTime": "2019-08-20T14:25:42Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "68.255.1.254", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAT89OT8D8GSJR8WQG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-20T14:11:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/08/20/[$LATEST]1f5582b0f5972ec3ec7b55a61a180781", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b50e095-cfa7-4ab4-bb7b-0859c3ee36f1", "record_id": "flaws_cloudtrail:0000324:0b50e095-cfa7-4ab4-bb7b-0859c3ee36f1", "row_index": 324, "timestamp": "2019-08-20T14:25:42Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1615, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b50e095-cfa7-4ab4-bb7b-0859c3ee36f1", "eventTime": "2019-08-20T14:25:42Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIATEYM8BKHJIJG23UN", "expiration": "Aug 21, 2019 2:25:42 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cbe287e-dd86-4ba6-a81a-c7c85a9789a6", "record_id": "flaws_cloudtrail:0000325:9cbe287e-dd86-4ba6-a81a-c7c85a9789a6", "row_index": 325, "timestamp": "2019-08-20T14:25:42Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAT89OT8D8GSJR8WQG", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "68.255.1.254", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cbe287e-dd86-4ba6-a81a-c7c85a9789a6", "eventTime": "2019-08-20T14:25:42Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "68.255.1.254", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAT89OT8D8GSJR8WQG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-20T14:11:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/08/20/[$LATEST]1f5582b0f5972ec3ec7b55a61a180781", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b50e095-cfa7-4ab4-bb7b-0859c3ee36f1", "record_id": "flaws_cloudtrail:0000326:0b50e095-cfa7-4ab4-bb7b-0859c3ee36f1", "row_index": 326, "timestamp": "2019-08-20T14:25:42Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1615, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b50e095-cfa7-4ab4-bb7b-0859c3ee36f1", "eventTime": "2019-08-20T14:25:42Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIATEYM8BKHJIJG23UN", "expiration": "Aug 21, 2019 2:25:42 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04b4d4b8-ecb4-4690-a274-62c25b31dbd4", "record_id": "flaws_cloudtrail:0000327:04b4d4b8-ecb4-4690-a274-62c25b31dbd4", "row_index": 327, "timestamp": "2019-08-20T14:46:40Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04b4d4b8-ecb4-4690-a274-62c25b31dbd4", "eventTime": "2019-08-20T14:46:40Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04b4d4b8-ecb4-4690-a274-62c25b31dbd4", "record_id": "flaws_cloudtrail:0000328:04b4d4b8-ecb4-4690-a274-62c25b31dbd4", "row_index": 328, "timestamp": "2019-08-20T14:46:40Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04b4d4b8-ecb4-4690-a274-62c25b31dbd4", "eventTime": "2019-08-20T14:46:40Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "972acc59-08b8-4fda-bc23-1c327a7fd7d1", "record_id": "flaws_cloudtrail:0000329:972acc59-08b8-4fda-bc23-1c327a7fd7d1", "row_index": 329, "timestamp": "2019-08-20T14:46:41Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "972acc59-08b8-4fda-bc23-1c327a7fd7d1", "eventTime": "2019-08-20T14:46:41Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "972acc59-08b8-4fda-bc23-1c327a7fd7d1", "record_id": "flaws_cloudtrail:0000330:972acc59-08b8-4fda-bc23-1c327a7fd7d1", "row_index": 330, "timestamp": "2019-08-20T14:46:41Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "972acc59-08b8-4fda-bc23-1c327a7fd7d1", "eventTime": "2019-08-20T14:46:41Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc242210a-7fd9-439c-8bb4-685e62472b50", "record_id": "flaws_cloudtrail:0000331:cc242210a-7fd9-439c-8bb4-685e62472b50", "row_index": 331, "timestamp": "2019-08-20T14:48:17Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc242210a-7fd9-439c-8bb4-685e62472b50", "eventTime": "2019-08-20T14:48:17Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9f9a255-eafb-4d57-8167-e4a1e98d14d2", "record_id": "flaws_cloudtrail:0000332:e9f9a255-eafb-4d57-8167-e4a1e98d14d2", "row_index": 332, "timestamp": "2019-08-20T14:48:17Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9f9a255-eafb-4d57-8167-e4a1e98d14d2", "eventTime": "2019-08-20T14:48:17Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc242210a-7fd9-439c-8bb4-685e62472b50", "record_id": "flaws_cloudtrail:0000333:cc242210a-7fd9-439c-8bb4-685e62472b50", "row_index": 333, "timestamp": "2019-08-20T14:48:17Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc242210a-7fd9-439c-8bb4-685e62472b50", "eventTime": "2019-08-20T14:48:17Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9f9a255-eafb-4d57-8167-e4a1e98d14d2", "record_id": "flaws_cloudtrail:0000334:e9f9a255-eafb-4d57-8167-e4a1e98d14d2", "row_index": 334, "timestamp": "2019-08-20T14:48:17Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9f9a255-eafb-4d57-8167-e4a1e98d14d2", "eventTime": "2019-08-20T14:48:17Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05063c-2ea9-46fe-9337-75b7b4e8b425", "record_id": "flaws_cloudtrail:0000335:05063c-2ea9-46fe-9337-75b7b4e8b425", "row_index": 335, "timestamp": "2019-08-20T14:50:17Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05063c-2ea9-46fe-9337-75b7b4e8b425", "eventTime": "2019-08-20T14:50:17Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05063c-2ea9-46fe-9337-75b7b4e8b425", "record_id": "flaws_cloudtrail:0000336:05063c-2ea9-46fe-9337-75b7b4e8b425", "row_index": 336, "timestamp": "2019-08-20T14:50:17Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05063c-2ea9-46fe-9337-75b7b4e8b425", "eventTime": "2019-08-20T14:50:17Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65ba1039-6371-4345-ada1-c8f648dd89cf", "record_id": "flaws_cloudtrail:0000337:65ba1039-6371-4345-ada1-c8f648dd89cf", "row_index": 337, "timestamp": "2019-08-20T14:50:18Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65ba1039-6371-4345-ada1-c8f648dd89cf", "eventTime": "2019-08-20T14:50:18Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65ba1039-6371-4345-ada1-c8f648dd89cf", "record_id": "flaws_cloudtrail:0000338:65ba1039-6371-4345-ada1-c8f648dd89cf", "row_index": 338, "timestamp": "2019-08-20T14:50:18Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65ba1039-6371-4345-ada1-c8f648dd89cf", "eventTime": "2019-08-20T14:50:18Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23937a16-d158-4eae-9feb-0119580e7c50", "record_id": "flaws_cloudtrail:0000339:23937a16-d158-4eae-9feb-0119580e7c50", "row_index": 339, "timestamp": "2019-08-20T14:50:34Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23937a16-d158-4eae-9feb-0119580e7c50", "eventTime": "2019-08-20T14:50:34Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23937a16-d158-4eae-9feb-0119580e7c50", "record_id": "flaws_cloudtrail:0000340:23937a16-d158-4eae-9feb-0119580e7c50", "row_index": 340, "timestamp": "2019-08-20T14:50:34Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23937a16-d158-4eae-9feb-0119580e7c50", "eventTime": "2019-08-20T14:50:34Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e382ee03-af4f-4338-9776-361ea3f390ff", "record_id": "flaws_cloudtrail:0000341:e382ee03-af4f-4338-9776-361ea3f390ff", "row_index": 341, "timestamp": "2019-08-20T14:50:35Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e382ee03-af4f-4338-9776-361ea3f390ff", "eventTime": "2019-08-20T14:50:35Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ef1157b-8cb7-4bfa-a4ad-e9d840603348", "record_id": "flaws_cloudtrail:0000342:9ef1157b-8cb7-4bfa-a4ad-e9d840603348", "row_index": 342, "timestamp": "2019-08-20T14:50:35Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ef1157b-8cb7-4bfa-a4ad-e9d840603348", "eventTime": "2019-08-20T14:50:35Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e382ee03-af4f-4338-9776-361ea3f390ff", "record_id": "flaws_cloudtrail:0000343:e382ee03-af4f-4338-9776-361ea3f390ff", "row_index": 343, "timestamp": "2019-08-20T14:50:35Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e382ee03-af4f-4338-9776-361ea3f390ff", "eventTime": "2019-08-20T14:50:35Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ef1157b-8cb7-4bfa-a4ad-e9d840603348", "record_id": "flaws_cloudtrail:0000344:9ef1157b-8cb7-4bfa-a4ad-e9d840603348", "row_index": 344, "timestamp": "2019-08-20T14:50:35Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ef1157b-8cb7-4bfa-a4ad-e9d840603348", "eventTime": "2019-08-20T14:50:35Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cc5fad2-aa6e-46f6-983e-3902ac0e6206", "record_id": "flaws_cloudtrail:0000345:1cc5fad2-aa6e-46f6-983e-3902ac0e6206", "row_index": 345, "timestamp": "2019-08-20T14:50:36Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cc5fad2-aa6e-46f6-983e-3902ac0e6206", "eventTime": "2019-08-20T14:50:36Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cc5fad2-aa6e-46f6-983e-3902ac0e6206", "record_id": "flaws_cloudtrail:0000346:1cc5fad2-aa6e-46f6-983e-3902ac0e6206", "row_index": 346, "timestamp": "2019-08-20T14:50:36Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cc5fad2-aa6e-46f6-983e-3902ac0e6206", "eventTime": "2019-08-20T14:50:36Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e907ce46-2bdb-47a8-9f03-995c96d7df64", "record_id": "flaws_cloudtrail:0000347:e907ce46-2bdb-47a8-9f03-995c96d7df64", "row_index": 347, "timestamp": "2019-08-20T14:52:19Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e907ce46-2bdb-47a8-9f03-995c96d7df64", "eventTime": "2019-08-20T14:52:19Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e907ce46-2bdb-47a8-9f03-995c96d7df64", "record_id": "flaws_cloudtrail:0000348:e907ce46-2bdb-47a8-9f03-995c96d7df64", "row_index": 348, "timestamp": "2019-08-20T14:52:19Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e907ce46-2bdb-47a8-9f03-995c96d7df64", "eventTime": "2019-08-20T14:52:19Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24dcaca7-4de4-42c3-b6e9-d685c803cc3e", "record_id": "flaws_cloudtrail:0000349:24dcaca7-4de4-42c3-b6e9-d685c803cc3e", "row_index": 349, "timestamp": "2019-08-20T14:52:20Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24dcaca7-4de4-42c3-b6e9-d685c803cc3e", "eventTime": "2019-08-20T14:52:20Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1eb70912-af2b-4605-8d5f-25b8c7aceb79", "record_id": "flaws_cloudtrail:0000350:1eb70912-af2b-4605-8d5f-25b8c7aceb79", "row_index": 350, "timestamp": "2019-08-20T14:52:20Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1eb70912-af2b-4605-8d5f-25b8c7aceb79", "eventTime": "2019-08-20T14:52:20Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24dcaca7-4de4-42c3-b6e9-d685c803cc3e", "record_id": "flaws_cloudtrail:0000351:24dcaca7-4de4-42c3-b6e9-d685c803cc3e", "row_index": 351, "timestamp": "2019-08-20T14:52:20Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24dcaca7-4de4-42c3-b6e9-d685c803cc3e", "eventTime": "2019-08-20T14:52:20Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1eb70912-af2b-4605-8d5f-25b8c7aceb79", "record_id": "flaws_cloudtrail:0000352:1eb70912-af2b-4605-8d5f-25b8c7aceb79", "row_index": 352, "timestamp": "2019-08-20T14:52:20Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1eb70912-af2b-4605-8d5f-25b8c7aceb79", "eventTime": "2019-08-20T14:52:20Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7b845a6-9072-4e71-b3ae-662542dc13b5", "record_id": "flaws_cloudtrail:0000353:f7b845a6-9072-4e71-b3ae-662542dc13b5", "row_index": 353, "timestamp": "2019-08-20T14:52:21Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7b845a6-9072-4e71-b3ae-662542dc13b5", "eventTime": "2019-08-20T14:52:21Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7b845a6-9072-4e71-b3ae-662542dc13b5", "record_id": "flaws_cloudtrail:0000354:f7b845a6-9072-4e71-b3ae-662542dc13b5", "row_index": 354, "timestamp": "2019-08-20T14:52:21Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7b845a6-9072-4e71-b3ae-662542dc13b5", "eventTime": "2019-08-20T14:52:21Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a756f936-4940-4bd5-9da9-bb63f925e418", "record_id": "flaws_cloudtrail:0000355:a756f936-4940-4bd5-9da9-bb63f925e418", "row_index": 355, "timestamp": "2019-08-20T14:52:50Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a756f936-4940-4bd5-9da9-bb63f925e418", "eventTime": "2019-08-20T14:52:50Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a756f936-4940-4bd5-9da9-bb63f925e418", "record_id": "flaws_cloudtrail:0000356:a756f936-4940-4bd5-9da9-bb63f925e418", "row_index": 356, "timestamp": "2019-08-20T14:52:50Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a756f936-4940-4bd5-9da9-bb63f925e418", "eventTime": "2019-08-20T14:52:50Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "219b38e3-c2bf-4320-9200-f9a85202f25a", "record_id": "flaws_cloudtrail:0000357:219b38e3-c2bf-4320-9200-f9a85202f25a", "row_index": 357, "timestamp": "2019-08-20T14:52:51Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "219b38e3-c2bf-4320-9200-f9a85202f25a", "eventTime": "2019-08-20T14:52:51Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c6c216b-8562-47f0-a106-091d4aa7ccb3", "record_id": "flaws_cloudtrail:0000358:5c6c216b-8562-47f0-a106-091d4aa7ccb3", "row_index": 358, "timestamp": "2019-08-20T14:52:51Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c6c216b-8562-47f0-a106-091d4aa7ccb3", "eventTime": "2019-08-20T14:52:51Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe57fe29-6cab-400a-8550-d986fa7936ce", "record_id": "flaws_cloudtrail:0000359:fe57fe29-6cab-400a-8550-d986fa7936ce", "row_index": 359, "timestamp": "2019-08-20T14:52:51Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe57fe29-6cab-400a-8550-d986fa7936ce", "eventTime": "2019-08-20T14:52:51Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountSummary on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "219b38e3-c2bf-4320-9200-f9a85202f25a", "record_id": "flaws_cloudtrail:0000360:219b38e3-c2bf-4320-9200-f9a85202f25a", "row_index": 360, "timestamp": "2019-08-20T14:52:51Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "219b38e3-c2bf-4320-9200-f9a85202f25a", "eventTime": "2019-08-20T14:52:51Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c6c216b-8562-47f0-a106-091d4aa7ccb3", "record_id": "flaws_cloudtrail:0000361:5c6c216b-8562-47f0-a106-091d4aa7ccb3", "row_index": 361, "timestamp": "2019-08-20T14:52:51Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c6c216b-8562-47f0-a106-091d4aa7ccb3", "eventTime": "2019-08-20T14:52:51Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe57fe29-6cab-400a-8550-d986fa7936ce", "record_id": "flaws_cloudtrail:0000362:fe57fe29-6cab-400a-8550-d986fa7936ce", "row_index": 362, "timestamp": "2019-08-20T14:52:51Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe57fe29-6cab-400a-8550-d986fa7936ce", "eventTime": "2019-08-20T14:52:51Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountSummary on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "222b302b-e3e4-4293-b040-87261dc45d", "record_id": "flaws_cloudtrail:0000363:222b302b-e3e4-4293-b040-87261dc45d", "row_index": 363, "timestamp": "2019-08-20T14:52:52Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "222b302b-e3e4-4293-b040-87261dc45d", "eventTime": "2019-08-20T14:52:52Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "222b302b-e3e4-4293-b040-87261dc45d", "record_id": "flaws_cloudtrail:0000364:222b302b-e3e4-4293-b040-87261dc45d", "row_index": 364, "timestamp": "2019-08-20T14:52:52Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "222b302b-e3e4-4293-b040-87261dc45d", "eventTime": "2019-08-20T14:52:52Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82edd76b-d8f8-4841-8b6f-2c785e9be65e", "record_id": "flaws_cloudtrail:0000365:82edd76b-d8f8-4841-8b6f-2c785e9be65e", "row_index": 365, "timestamp": "2019-08-20T14:54:50Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82edd76b-d8f8-4841-8b6f-2c785e9be65e", "eventTime": "2019-08-20T14:54:50Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82edd76b-d8f8-4841-8b6f-2c785e9be65e", "record_id": "flaws_cloudtrail:0000366:82edd76b-d8f8-4841-8b6f-2c785e9be65e", "row_index": 366, "timestamp": "2019-08-20T14:54:50Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82edd76b-d8f8-4841-8b6f-2c785e9be65e", "eventTime": "2019-08-20T14:54:50Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1de78efa-4419-4a21-b0c8-410066fa8829", "record_id": "flaws_cloudtrail:0000367:1de78efa-4419-4a21-b0c8-410066fa8829", "row_index": 367, "timestamp": "2019-08-20T14:54:51Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1de78efa-4419-4a21-b0c8-410066fa8829", "eventTime": "2019-08-20T14:54:51Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "485378b6b-6330-4b39-9c3d-c67a761442ca", "record_id": "flaws_cloudtrail:0000368:485378b6b-6330-4b39-9c3d-c67a761442ca", "row_index": 368, "timestamp": "2019-08-20T14:54:51Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "485378b6b-6330-4b39-9c3d-c67a761442ca", "eventTime": "2019-08-20T14:54:51Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ed8f33a-394d-4788-97e7-e9e61de322694", "record_id": "flaws_cloudtrail:0000369:6ed8f33a-394d-4788-97e7-e9e61de322694", "row_index": 369, "timestamp": "2019-08-20T14:54:51Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ed8f33a-394d-4788-97e7-e9e61de322694", "eventTime": "2019-08-20T14:54:51Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a6fb7a1-23e2-4660-a6af-20f137044ca8", "record_id": "flaws_cloudtrail:0000370:2a6fb7a1-23e2-4660-a6af-20f137044ca8", "row_index": 370, "timestamp": "2019-08-20T14:54:51Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a6fb7a1-23e2-4660-a6af-20f137044ca8", "eventTime": "2019-08-20T14:54:51Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountSummary on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1de78efa-4419-4a21-b0c8-410066fa8829", "record_id": "flaws_cloudtrail:0000371:1de78efa-4419-4a21-b0c8-410066fa8829", "row_index": 371, "timestamp": "2019-08-20T14:54:51Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1de78efa-4419-4a21-b0c8-410066fa8829", "eventTime": "2019-08-20T14:54:51Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "485378b6b-6330-4b39-9c3d-c67a761442ca", "record_id": "flaws_cloudtrail:0000372:485378b6b-6330-4b39-9c3d-c67a761442ca", "row_index": 372, "timestamp": "2019-08-20T14:54:51Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "485378b6b-6330-4b39-9c3d-c67a761442ca", "eventTime": "2019-08-20T14:54:51Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ed8f33a-394d-4788-97e7-e9e61de322694", "record_id": "flaws_cloudtrail:0000373:6ed8f33a-394d-4788-97e7-e9e61de322694", "row_index": 373, "timestamp": "2019-08-20T14:54:51Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ed8f33a-394d-4788-97e7-e9e61de322694", "eventTime": "2019-08-20T14:54:51Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a6fb7a1-23e2-4660-a6af-20f137044ca8", "record_id": "flaws_cloudtrail:0000374:2a6fb7a1-23e2-4660-a6af-20f137044ca8", "row_index": 374, "timestamp": "2019-08-20T14:54:51Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a6fb7a1-23e2-4660-a6af-20f137044ca8", "eventTime": "2019-08-20T14:54:51Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountSummary on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8f0d9e2-0fc7-42fd-b680-64c3f8dfb0a4", "record_id": "flaws_cloudtrail:0000375:e8f0d9e2-0fc7-42fd-b680-64c3f8dfb0a4", "row_index": 375, "timestamp": "2019-08-20T14:55:09Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8f0d9e2-0fc7-42fd-b680-64c3f8dfb0a4", "eventTime": "2019-08-20T14:55:09Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8f0d9e2-0fc7-42fd-b680-64c3f8dfb0a4", "record_id": "flaws_cloudtrail:0000376:e8f0d9e2-0fc7-42fd-b680-64c3f8dfb0a4", "row_index": 376, "timestamp": "2019-08-20T14:55:09Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8f0d9e2-0fc7-42fd-b680-64c3f8dfb0a4", "eventTime": "2019-08-20T14:55:09Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acf5ecea-87e7-4f75-a2d9-40754aba3f9a", "record_id": "flaws_cloudtrail:0000377:acf5ecea-87e7-4f75-a2d9-40754aba3f9a", "row_index": 377, "timestamp": "2019-08-20T14:55:10Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acf5ecea-87e7-4f75-a2d9-40754aba3f9a", "eventTime": "2019-08-20T14:55:10Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountPasswordPolicy on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acf5ecea-87e7-4f75-a2d9-40754aba3f9a", "record_id": "flaws_cloudtrail:0000378:acf5ecea-87e7-4f75-a2d9-40754aba3f9a", "row_index": 378, "timestamp": "2019-08-20T14:55:10Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acf5ecea-87e7-4f75-a2d9-40754aba3f9a", "eventTime": "2019-08-20T14:55:10Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountPasswordPolicy on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c388d09b-4b07-4335-9812-e3663dd4b72c", "record_id": "flaws_cloudtrail:0000379:c388d09b-4b07-4335-9812-e3663dd4b72c", "row_index": 379, "timestamp": "2019-08-20T14:55:32Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c388d09b-4b07-4335-9812-e3663dd4b72c", "eventTime": "2019-08-20T14:55:32Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3f7f996-8788-4107-9f86-ecc8e2a5241d", "record_id": "flaws_cloudtrail:0000380:d3f7f996-8788-4107-9f86-ecc8e2a5241d", "row_index": 380, "timestamp": "2019-08-20T14:55:32Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3f7f996-8788-4107-9f86-ecc8e2a5241d", "eventTime": "2019-08-20T14:55:32Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c388d09b-4b07-4335-9812-e3663dd4b72c", "record_id": "flaws_cloudtrail:0000381:c388d09b-4b07-4335-9812-e3663dd4b72c", "row_index": 381, "timestamp": "2019-08-20T14:55:32Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c388d09b-4b07-4335-9812-e3663dd4b72c", "eventTime": "2019-08-20T14:55:32Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3f7f996-8788-4107-9f86-ecc8e2a5241d", "record_id": "flaws_cloudtrail:0000382:d3f7f996-8788-4107-9f86-ecc8e2a5241d", "row_index": 382, "timestamp": "2019-08-20T14:55:32Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3f7f996-8788-4107-9f86-ecc8e2a5241d", "eventTime": "2019-08-20T14:55:32Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36ffe570-ee90-43e3-b80a-850286a236db", "record_id": "flaws_cloudtrail:0000383:36ffe570-ee90-43e3-b80a-850286a236db", "row_index": 383, "timestamp": "2019-08-20T14:56:13Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36ffe570-ee90-43e3-b80a-850286a236db", "eventTime": "2019-08-20T14:56:13Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36ffe570-ee90-43e3-b80a-850286a236db", "record_id": "flaws_cloudtrail:0000384:36ffe570-ee90-43e3-b80a-850286a236db", "row_index": 384, "timestamp": "2019-08-20T14:56:13Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36ffe570-ee90-43e3-b80a-850286a236db", "eventTime": "2019-08-20T14:56:13Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42901-6ce7-4930-8cfc-0b779290c479", "record_id": "flaws_cloudtrail:0000385:42901-6ce7-4930-8cfc-0b779290c479", "row_index": 385, "timestamp": "2019-08-20T14:56:14Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42901-6ce7-4930-8cfc-0b779290c479", "eventTime": "2019-08-20T14:56:14Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42901-6ce7-4930-8cfc-0b779290c479", "record_id": "flaws_cloudtrail:0000386:42901-6ce7-4930-8cfc-0b779290c479", "row_index": 386, "timestamp": "2019-08-20T14:56:14Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42901-6ce7-4930-8cfc-0b779290c479", "eventTime": "2019-08-20T14:56:14Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9d5c42f-7397-4406-944e-bee0fb402057", "record_id": "flaws_cloudtrail:0000387:d9d5c42f-7397-4406-944e-bee0fb402057", "row_index": 387, "timestamp": "2019-08-20T14:57:32Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9d5c42f-7397-4406-944e-bee0fb402057", "eventTime": "2019-08-20T14:57:32Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40c33494-1b3b-4baf-918a-830e373c1aa9", "record_id": "flaws_cloudtrail:0000388:40c33494-1b3b-4baf-918a-830e373c1aa9", "row_index": 388, "timestamp": "2019-08-20T14:57:32Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40c33494-1b3b-4baf-918a-830e373c1aa9", "eventTime": "2019-08-20T14:57:32Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42f7bb75-9edd-40f1-a9a0-820f4be54bae", "record_id": "flaws_cloudtrail:0000389:42f7bb75-9edd-40f1-a9a0-820f4be54bae", "row_index": 389, "timestamp": "2019-08-20T14:57:32Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42f7bb75-9edd-40f1-a9a0-820f4be54bae", "eventTime": "2019-08-20T14:57:32Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31d444cd-bfa0-4b35-8a90-d349dd2c16c1", "record_id": "flaws_cloudtrail:0000390:31d444cd-bfa0-4b35-8a90-d349dd2c16c1", "row_index": 390, "timestamp": "2019-08-20T14:57:32Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31d444cd-bfa0-4b35-8a90-d349dd2c16c1", "eventTime": "2019-08-20T14:57:32Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9d5c42f-7397-4406-944e-bee0fb402057", "record_id": "flaws_cloudtrail:0000391:d9d5c42f-7397-4406-944e-bee0fb402057", "row_index": 391, "timestamp": "2019-08-20T14:57:32Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9d5c42f-7397-4406-944e-bee0fb402057", "eventTime": "2019-08-20T14:57:32Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40c33494-1b3b-4baf-918a-830e373c1aa9", "record_id": "flaws_cloudtrail:0000392:40c33494-1b3b-4baf-918a-830e373c1aa9", "row_index": 392, "timestamp": "2019-08-20T14:57:32Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40c33494-1b3b-4baf-918a-830e373c1aa9", "eventTime": "2019-08-20T14:57:32Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42f7bb75-9edd-40f1-a9a0-820f4be54bae", "record_id": "flaws_cloudtrail:0000393:42f7bb75-9edd-40f1-a9a0-820f4be54bae", "row_index": 393, "timestamp": "2019-08-20T14:57:32Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42f7bb75-9edd-40f1-a9a0-820f4be54bae", "eventTime": "2019-08-20T14:57:32Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31d444cd-bfa0-4b35-8a90-d349dd2c16c1", "record_id": "flaws_cloudtrail:0000394:31d444cd-bfa0-4b35-8a90-d349dd2c16c1", "row_index": 394, "timestamp": "2019-08-20T14:57:32Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31d444cd-bfa0-4b35-8a90-d349dd2c16c1", "eventTime": "2019-08-20T14:57:32Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a5855ff-82a8-4ad1-8c05-c8df8f9b341b", "record_id": "flaws_cloudtrail:0000395:1a5855ff-82a8-4ad1-8c05-c8df8f9b341b", "row_index": 395, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a5855ff-82a8-4ad1-8c05-c8df8f9b341b", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4c41c3d-351e-4317-ae7e-17d70d8b7fbe", "record_id": "flaws_cloudtrail:0000396:f4c41c3d-351e-4317-ae7e-17d70d8b7fbe", "row_index": 396, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4c41c3d-351e-4317-ae7e-17d70d8b7fbe", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "778017-02d1-41d3-874a-a98ca4140c99", "record_id": "flaws_cloudtrail:0000397:778017-02d1-41d3-874a-a98ca4140c99", "row_index": 397, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "778017-02d1-41d3-874a-a98ca4140c99", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39519b75-c064-4e93-94ac-b17cb956be04", "record_id": "flaws_cloudtrail:0000398:39519b75-c064-4e93-94ac-b17cb956be04", "row_index": 398, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39519b75-c064-4e93-94ac-b17cb956be04", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d93c05f-7f2b-43ce-9c3e-75f7d0d9e708", "record_id": "flaws_cloudtrail:0000399:7d93c05f-7f2b-43ce-9c3e-75f7d0d9e708", "row_index": 399, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d93c05f-7f2b-43ce-9c3e-75f7d0d9e708", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8cc8b1f-78b0-4c5d-bf88-884d5fcc0378", "record_id": "flaws_cloudtrail:0000400:f8cc8b1f-78b0-4c5d-bf88-884d5fcc0378", "row_index": 400, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8cc8b1f-78b0-4c5d-bf88-884d5fcc0378", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8145fd6-e27e-489b-9156-1dfad70a5c9e", "record_id": "flaws_cloudtrail:0000401:d8145fd6-e27e-489b-9156-1dfad70a5c9e", "row_index": 401, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8145fd6-e27e-489b-9156-1dfad70a5c9e", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c42b2925-fa1b-4ab4-bfc7-e463deb87f28", "record_id": "flaws_cloudtrail:0000402:c42b2925-fa1b-4ab4-bfc7-e463deb87f28", "row_index": 402, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c42b2925-fa1b-4ab4-bfc7-e463deb87f28", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07d799609-ac60-472f-ac1f-89761b12cfe8", "record_id": "flaws_cloudtrail:0000403:07d799609-ac60-472f-ac1f-89761b12cfe8", "row_index": 403, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07d799609-ac60-472f-ac1f-89761b12cfe8", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ca9ace8-e031-4069-95f1-52c9d7bbe313", "record_id": "flaws_cloudtrail:0000404:4ca9ace8-e031-4069-95f1-52c9d7bbe313", "row_index": 404, "timestamp": "2019-08-20T14:57:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ca9ace8-e031-4069-95f1-52c9d7bbe313", "eventTime": "2019-08-20T14:57:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZCAV0WCUBE5L4Q7A", "expiration": "Aug 20, 2019 9:32:18 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d83f64c-d74d-4293-8d98-b01760f2995e", "record_id": "flaws_cloudtrail:0000405:3d83f64c-d74d-4293-8d98-b01760f2995e", "row_index": 405, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d83f64c-d74d-4293-8d98-b01760f2995e", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a5855ff-82a8-4ad1-8c05-c8df8f9b341b", "record_id": "flaws_cloudtrail:0000406:1a5855ff-82a8-4ad1-8c05-c8df8f9b341b", "row_index": 406, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a5855ff-82a8-4ad1-8c05-c8df8f9b341b", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4c41c3d-351e-4317-ae7e-17d70d8b7fbe", "record_id": "flaws_cloudtrail:0000407:f4c41c3d-351e-4317-ae7e-17d70d8b7fbe", "row_index": 407, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4c41c3d-351e-4317-ae7e-17d70d8b7fbe", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "778017-02d1-41d3-874a-a98ca4140c99", "record_id": "flaws_cloudtrail:0000408:778017-02d1-41d3-874a-a98ca4140c99", "row_index": 408, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "778017-02d1-41d3-874a-a98ca4140c99", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39519b75-c064-4e93-94ac-b17cb956be04", "record_id": "flaws_cloudtrail:0000409:39519b75-c064-4e93-94ac-b17cb956be04", "row_index": 409, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39519b75-c064-4e93-94ac-b17cb956be04", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d93c05f-7f2b-43ce-9c3e-75f7d0d9e708", "record_id": "flaws_cloudtrail:0000410:7d93c05f-7f2b-43ce-9c3e-75f7d0d9e708", "row_index": 410, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d93c05f-7f2b-43ce-9c3e-75f7d0d9e708", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8cc8b1f-78b0-4c5d-bf88-884d5fcc0378", "record_id": "flaws_cloudtrail:0000411:f8cc8b1f-78b0-4c5d-bf88-884d5fcc0378", "row_index": 411, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8cc8b1f-78b0-4c5d-bf88-884d5fcc0378", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8145fd6-e27e-489b-9156-1dfad70a5c9e", "record_id": "flaws_cloudtrail:0000412:d8145fd6-e27e-489b-9156-1dfad70a5c9e", "row_index": 412, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8145fd6-e27e-489b-9156-1dfad70a5c9e", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c42b2925-fa1b-4ab4-bfc7-e463deb87f28", "record_id": "flaws_cloudtrail:0000413:c42b2925-fa1b-4ab4-bfc7-e463deb87f28", "row_index": 413, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c42b2925-fa1b-4ab4-bfc7-e463deb87f28", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07d799609-ac60-472f-ac1f-89761b12cfe8", "record_id": "flaws_cloudtrail:0000414:07d799609-ac60-472f-ac1f-89761b12cfe8", "row_index": 414, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07d799609-ac60-472f-ac1f-89761b12cfe8", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ca9ace8-e031-4069-95f1-52c9d7bbe313", "record_id": "flaws_cloudtrail:0000415:4ca9ace8-e031-4069-95f1-52c9d7bbe313", "row_index": 415, "timestamp": "2019-08-20T14:57:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ca9ace8-e031-4069-95f1-52c9d7bbe313", "eventTime": "2019-08-20T14:57:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZCAV0WCUBE5L4Q7A", "expiration": "Aug 20, 2019 9:32:18 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d83f64c-d74d-4293-8d98-b01760f2995e", "record_id": "flaws_cloudtrail:0000416:3d83f64c-d74d-4293-8d98-b01760f2995e", "row_index": 416, "timestamp": "2019-08-20T14:57:33Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d83f64c-d74d-4293-8d98-b01760f2995e", "eventTime": "2019-08-20T14:57:33Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47a714c0-c3f2-475f-9995-a7a261b787b0", "record_id": "flaws_cloudtrail:0000417:47a714c0-c3f2-475f-9995-a7a261b787b0", "row_index": 417, "timestamp": "2019-08-20T14:57:34Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47a714c0-c3f2-475f-9995-a7a261b787b0", "eventTime": "2019-08-20T14:57:34Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56416f-ae2b-46ed-bf54-fafd2dbeb711", "record_id": "flaws_cloudtrail:0000418:56416f-ae2b-46ed-bf54-fafd2dbeb711", "row_index": 418, "timestamp": "2019-08-20T14:57:34Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56416f-ae2b-46ed-bf54-fafd2dbeb711", "eventTime": "2019-08-20T14:57:34Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95d61fa1-dfdf-4b62-a9ba-4d6d8cc30c08", "record_id": "flaws_cloudtrail:0000419:95d61fa1-dfdf-4b62-a9ba-4d6d8cc30c08", "row_index": 419, "timestamp": "2019-08-20T14:57:34Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95d61fa1-dfdf-4b62-a9ba-4d6d8cc30c08", "eventTime": "2019-08-20T14:57:34Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47a714c0-c3f2-475f-9995-a7a261b787b0", "record_id": "flaws_cloudtrail:0000420:47a714c0-c3f2-475f-9995-a7a261b787b0", "row_index": 420, "timestamp": "2019-08-20T14:57:34Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47a714c0-c3f2-475f-9995-a7a261b787b0", "eventTime": "2019-08-20T14:57:34Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56416f-ae2b-46ed-bf54-fafd2dbeb711", "record_id": "flaws_cloudtrail:0000421:56416f-ae2b-46ed-bf54-fafd2dbeb711", "row_index": 421, "timestamp": "2019-08-20T14:57:34Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56416f-ae2b-46ed-bf54-fafd2dbeb711", "eventTime": "2019-08-20T14:57:34Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95d61fa1-dfdf-4b62-a9ba-4d6d8cc30c08", "record_id": "flaws_cloudtrail:0000422:95d61fa1-dfdf-4b62-a9ba-4d6d8cc30c08", "row_index": 422, "timestamp": "2019-08-20T14:57:34Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95d61fa1-dfdf-4b62-a9ba-4d6d8cc30c08", "eventTime": "2019-08-20T14:57:34Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2aa9f93f-b1ec-4e50-9718-0cccc361279b", "record_id": "flaws_cloudtrail:0000423:2aa9f93f-b1ec-4e50-9718-0cccc361279b", "row_index": 423, "timestamp": "2019-08-20T14:58:06Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2aa9f93f-b1ec-4e50-9718-0cccc361279b", "eventTime": "2019-08-20T14:58:06Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2aa9f93f-b1ec-4e50-9718-0cccc361279b", "record_id": "flaws_cloudtrail:0000424:2aa9f93f-b1ec-4e50-9718-0cccc361279b", "row_index": 424, "timestamp": "2019-08-20T14:58:06Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2aa9f93f-b1ec-4e50-9718-0cccc361279b", "eventTime": "2019-08-20T14:58:06Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba33e068-88af-4add-8cc5-ed6c3cb3164f", "record_id": "flaws_cloudtrail:0000425:ba33e068-88af-4add-8cc5-ed6c3cb3164f", "row_index": 425, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba33e068-88af-4add-8cc5-ed6c3cb3164f", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aeecf28-9b89-4f7d-9870-e151860dc71", "record_id": "flaws_cloudtrail:0000426:5aeecf28-9b89-4f7d-9870-e151860dc71", "row_index": 426, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aeecf28-9b89-4f7d-9870-e151860dc71", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5f0d380-a4a5-44d5-8b2c-a8ed12743643", "record_id": "flaws_cloudtrail:0000427:d5f0d380-a4a5-44d5-8b2c-a8ed12743643", "row_index": 427, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5f0d380-a4a5-44d5-8b2c-a8ed12743643", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbfd9e7b-2acf-4be0-8f65-10cec93346", "record_id": "flaws_cloudtrail:0000428:bbfd9e7b-2acf-4be0-8f65-10cec93346", "row_index": 428, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbfd9e7b-2acf-4be0-8f65-10cec93346", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f69d636a-f553-48c3-8499-89462fcb5", "record_id": "flaws_cloudtrail:0000429:f69d636a-f553-48c3-8499-89462fcb5", "row_index": 429, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f69d636a-f553-48c3-8499-89462fcb5", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc3773ac-7e3a-4f79-a837-e2af4ca42b2c", "record_id": "flaws_cloudtrail:0000430:fc3773ac-7e3a-4f79-a837-e2af4ca42b2c", "row_index": 430, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc3773ac-7e3a-4f79-a837-e2af4ca42b2c", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "faa3bf85-053d-4bdf-bb47-21c9d76a0655", "record_id": "flaws_cloudtrail:0000431:faa3bf85-053d-4bdf-bb47-21c9d76a0655", "row_index": 431, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "faa3bf85-053d-4bdf-bb47-21c9d76a0655", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "654b370a-4f54-4df2-bb66-fb016149b799", "record_id": "flaws_cloudtrail:0000432:654b370a-4f54-4df2-bb66-fb016149b799", "row_index": 432, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "654b370a-4f54-4df2-bb66-fb016149b799", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de634f1f-1e6d-428d-8b44-86be2be12f0f", "record_id": "flaws_cloudtrail:0000433:de634f1f-1e6d-428d-8b44-86be2be12f0f", "row_index": 433, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de634f1f-1e6d-428d-8b44-86be2be12f0f", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4949d2c2-3331-4ffc-95dd-8186775d0f4a", "record_id": "flaws_cloudtrail:0000434:4949d2c2-3331-4ffc-95dd-8186775d0f4a", "row_index": 434, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4949d2c2-3331-4ffc-95dd-8186775d0f4a", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ebc0c5a-8917-4e46-b023-acec2468abaa", "record_id": "flaws_cloudtrail:0000435:8ebc0c5a-8917-4e46-b023-acec2468abaa", "row_index": 435, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ebc0c5a-8917-4e46-b023-acec2468abaa", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4f595a7-576e-4171-95ad-06aa8efa6bc8", "record_id": "flaws_cloudtrail:0000436:d4f595a7-576e-4171-95ad-06aa8efa6bc8", "row_index": 436, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4f595a7-576e-4171-95ad-06aa8efa6bc8", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "581d9a04-16a9-41b1-95de-b509a61cc833", "record_id": "flaws_cloudtrail:0000437:581d9a04-16a9-41b1-95de-b509a61cc833", "row_index": 437, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "581d9a04-16a9-41b1-95de-b509a61cc833", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba33e068-88af-4add-8cc5-ed6c3cb3164f", "record_id": "flaws_cloudtrail:0000438:ba33e068-88af-4add-8cc5-ed6c3cb3164f", "row_index": 438, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba33e068-88af-4add-8cc5-ed6c3cb3164f", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aeecf28-9b89-4f7d-9870-e151860dc71", "record_id": "flaws_cloudtrail:0000439:5aeecf28-9b89-4f7d-9870-e151860dc71", "row_index": 439, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aeecf28-9b89-4f7d-9870-e151860dc71", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5f0d380-a4a5-44d5-8b2c-a8ed12743643", "record_id": "flaws_cloudtrail:0000440:d5f0d380-a4a5-44d5-8b2c-a8ed12743643", "row_index": 440, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5f0d380-a4a5-44d5-8b2c-a8ed12743643", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbfd9e7b-2acf-4be0-8f65-10cec93346", "record_id": "flaws_cloudtrail:0000441:bbfd9e7b-2acf-4be0-8f65-10cec93346", "row_index": 441, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbfd9e7b-2acf-4be0-8f65-10cec93346", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f69d636a-f553-48c3-8499-89462fcb5", "record_id": "flaws_cloudtrail:0000442:f69d636a-f553-48c3-8499-89462fcb5", "row_index": 442, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f69d636a-f553-48c3-8499-89462fcb5", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc3773ac-7e3a-4f79-a837-e2af4ca42b2c", "record_id": "flaws_cloudtrail:0000443:fc3773ac-7e3a-4f79-a837-e2af4ca42b2c", "row_index": 443, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc3773ac-7e3a-4f79-a837-e2af4ca42b2c", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "faa3bf85-053d-4bdf-bb47-21c9d76a0655", "record_id": "flaws_cloudtrail:0000444:faa3bf85-053d-4bdf-bb47-21c9d76a0655", "row_index": 444, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "faa3bf85-053d-4bdf-bb47-21c9d76a0655", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "654b370a-4f54-4df2-bb66-fb016149b799", "record_id": "flaws_cloudtrail:0000445:654b370a-4f54-4df2-bb66-fb016149b799", "row_index": 445, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "654b370a-4f54-4df2-bb66-fb016149b799", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de634f1f-1e6d-428d-8b44-86be2be12f0f", "record_id": "flaws_cloudtrail:0000446:de634f1f-1e6d-428d-8b44-86be2be12f0f", "row_index": 446, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de634f1f-1e6d-428d-8b44-86be2be12f0f", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4949d2c2-3331-4ffc-95dd-8186775d0f4a", "record_id": "flaws_cloudtrail:0000447:4949d2c2-3331-4ffc-95dd-8186775d0f4a", "row_index": 447, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4949d2c2-3331-4ffc-95dd-8186775d0f4a", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ebc0c5a-8917-4e46-b023-acec2468abaa", "record_id": "flaws_cloudtrail:0000448:8ebc0c5a-8917-4e46-b023-acec2468abaa", "row_index": 448, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ebc0c5a-8917-4e46-b023-acec2468abaa", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4f595a7-576e-4171-95ad-06aa8efa6bc8", "record_id": "flaws_cloudtrail:0000449:d4f595a7-576e-4171-95ad-06aa8efa6bc8", "row_index": 449, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4f595a7-576e-4171-95ad-06aa8efa6bc8", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "581d9a04-16a9-41b1-95de-b509a61cc833", "record_id": "flaws_cloudtrail:0000450:581d9a04-16a9-41b1-95de-b509a61cc833", "row_index": 450, "timestamp": "2019-08-20T14:58:07Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "581d9a04-16a9-41b1-95de-b509a61cc833", "eventTime": "2019-08-20T14:58:07Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56c4912b-2ff4-4b9b-81ba-55a9797d814e", "record_id": "flaws_cloudtrail:0000451:56c4912b-2ff4-4b9b-81ba-55a9797d814e", "row_index": 451, "timestamp": "2019-08-20T14:58:08Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56c4912b-2ff4-4b9b-81ba-55a9797d814e", "eventTime": "2019-08-20T14:58:08Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec9a70b6-8c81-40a0-9154-e2236c28122d", "record_id": "flaws_cloudtrail:0000452:ec9a70b6-8c81-40a0-9154-e2236c28122d", "row_index": 452, "timestamp": "2019-08-20T14:58:08Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec9a70b6-8c81-40a0-9154-e2236c28122d", "eventTime": "2019-08-20T14:58:08Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f26474c6-2745-44e4-b188-5cadddc07a1b", "record_id": "flaws_cloudtrail:0000453:f26474c6-2745-44e4-b188-5cadddc07a1b", "row_index": 453, "timestamp": "2019-08-20T14:58:08Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f26474c6-2745-44e4-b188-5cadddc07a1b", "eventTime": "2019-08-20T14:58:08Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56c4912b-2ff4-4b9b-81ba-55a9797d814e", "record_id": "flaws_cloudtrail:0000454:56c4912b-2ff4-4b9b-81ba-55a9797d814e", "row_index": 454, "timestamp": "2019-08-20T14:58:08Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56c4912b-2ff4-4b9b-81ba-55a9797d814e", "eventTime": "2019-08-20T14:58:08Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec9a70b6-8c81-40a0-9154-e2236c28122d", "record_id": "flaws_cloudtrail:0000455:ec9a70b6-8c81-40a0-9154-e2236c28122d", "row_index": 455, "timestamp": "2019-08-20T14:58:08Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec9a70b6-8c81-40a0-9154-e2236c28122d", "eventTime": "2019-08-20T14:58:08Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f26474c6-2745-44e4-b188-5cadddc07a1b", "record_id": "flaws_cloudtrail:0000456:f26474c6-2745-44e4-b188-5cadddc07a1b", "row_index": 456, "timestamp": "2019-08-20T14:58:08Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f26474c6-2745-44e4-b188-5cadddc07a1b", "eventTime": "2019-08-20T14:58:08Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {"items": [{"name": "encrypted", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2ad3bf3-d4e1-4c5e-bfb4-d35713e574a8", "record_id": "flaws_cloudtrail:0000457:f2ad3bf3-d4e1-4c5e-bfb4-d35713e574a8", "row_index": 457, "timestamp": "2019-08-20T14:58:34Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2ad3bf3-d4e1-4c5e-bfb4-d35713e574a8", "eventTime": "2019-08-20T14:58:34Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30c46735-f6f8-4e89-abdb-a092a703e3e9", "record_id": "flaws_cloudtrail:0000458:30c46735-f6f8-4e89-abdb-a092a703e3e9", "row_index": 458, "timestamp": "2019-08-20T14:58:34Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30c46735-f6f8-4e89-abdb-a092a703e3e9", "eventTime": "2019-08-20T14:58:34Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01661-5087-4c4c-a634-19065bb13f2", "record_id": "flaws_cloudtrail:0000459:01661-5087-4c4c-a634-19065bb13f2", "row_index": 459, "timestamp": "2019-08-20T14:58:34Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01661-5087-4c4c-a634-19065bb13f2", "eventTime": "2019-08-20T14:58:34Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "344be658-c7da-4791-9d0c-61a97bf3c919", "record_id": "flaws_cloudtrail:0000460:344be658-c7da-4791-9d0c-61a97bf3c919", "row_index": 460, "timestamp": "2019-08-20T14:58:34Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "344be658-c7da-4791-9d0c-61a97bf3c919", "eventTime": "2019-08-20T14:58:34Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb838e5f-a525-405d-846d-cc014599fa8a", "record_id": "flaws_cloudtrail:0000461:eb838e5f-a525-405d-846d-cc014599fa8a", "row_index": 461, "timestamp": "2019-08-20T14:58:34Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb838e5f-a525-405d-846d-cc014599fa8a", "eventTime": "2019-08-20T14:58:34Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7449e12-f2bd-42a1-a7cc-7b45c4d31e52", "record_id": "flaws_cloudtrail:0000462:a7449e12-f2bd-42a1-a7cc-7b45c4d31e52", "row_index": 462, "timestamp": "2019-08-20T14:58:34Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7449e12-f2bd-42a1-a7cc-7b45c4d31e52", "eventTime": "2019-08-20T14:58:34Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2ad3bf3-d4e1-4c5e-bfb4-d35713e574a8", "record_id": "flaws_cloudtrail:0000463:f2ad3bf3-d4e1-4c5e-bfb4-d35713e574a8", "row_index": 463, "timestamp": "2019-08-20T14:58:34Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2ad3bf3-d4e1-4c5e-bfb4-d35713e574a8", "eventTime": "2019-08-20T14:58:34Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30c46735-f6f8-4e89-abdb-a092a703e3e9", "record_id": "flaws_cloudtrail:0000464:30c46735-f6f8-4e89-abdb-a092a703e3e9", "row_index": 464, "timestamp": "2019-08-20T14:58:34Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30c46735-f6f8-4e89-abdb-a092a703e3e9", "eventTime": "2019-08-20T14:58:34Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01661-5087-4c4c-a634-19065bb13f2", "record_id": "flaws_cloudtrail:0000465:01661-5087-4c4c-a634-19065bb13f2", "row_index": 465, "timestamp": "2019-08-20T14:58:34Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01661-5087-4c4c-a634-19065bb13f2", "eventTime": "2019-08-20T14:58:34Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "344be658-c7da-4791-9d0c-61a97bf3c919", "record_id": "flaws_cloudtrail:0000466:344be658-c7da-4791-9d0c-61a97bf3c919", "row_index": 466, "timestamp": "2019-08-20T14:58:34Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "344be658-c7da-4791-9d0c-61a97bf3c919", "eventTime": "2019-08-20T14:58:34Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb838e5f-a525-405d-846d-cc014599fa8a", "record_id": "flaws_cloudtrail:0000467:eb838e5f-a525-405d-846d-cc014599fa8a", "row_index": 467, "timestamp": "2019-08-20T14:58:34Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb838e5f-a525-405d-846d-cc014599fa8a", "eventTime": "2019-08-20T14:58:34Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7449e12-f2bd-42a1-a7cc-7b45c4d31e52", "record_id": "flaws_cloudtrail:0000468:a7449e12-f2bd-42a1-a7cc-7b45c4d31e52", "row_index": 468, "timestamp": "2019-08-20T14:58:34Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7449e12-f2bd-42a1-a7cc-7b45c4d31e52", "eventTime": "2019-08-20T14:58:34Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d844d0f2-272f-40cb-b910-28d8e94b2d0f", "record_id": "flaws_cloudtrail:0000469:d844d0f2-272f-40cb-b910-28d8e94b2d0f", "row_index": 469, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d844d0f2-272f-40cb-b910-28d8e94b2d0f", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "717f351a-375d-4288-a0d4-74c2e3571ce4", "record_id": "flaws_cloudtrail:0000470:717f351a-375d-4288-a0d4-74c2e3571ce4", "row_index": 470, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "717f351a-375d-4288-a0d4-74c2e3571ce4", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc8b47a7-6582-45b9-8562-2d1be5f83879", "record_id": "flaws_cloudtrail:0000471:bc8b47a7-6582-45b9-8562-2d1be5f83879", "row_index": 471, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc8b47a7-6582-45b9-8562-2d1be5f83879", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b712f77-de1b-4796-8a8e-e83291deaf6e", "record_id": "flaws_cloudtrail:0000472:4b712f77-de1b-4796-8a8e-e83291deaf6e", "row_index": 472, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b712f77-de1b-4796-8a8e-e83291deaf6e", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee04d890-8086-4b3d-9603-68c2f1fd921d", "record_id": "flaws_cloudtrail:0000473:ee04d890-8086-4b3d-9603-68c2f1fd921d", "row_index": 473, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee04d890-8086-4b3d-9603-68c2f1fd921d", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6bbe399-3b50-4068-8235-de4e8288e502", "record_id": "flaws_cloudtrail:0000474:d6bbe399-3b50-4068-8235-de4e8288e502", "row_index": 474, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6bbe399-3b50-4068-8235-de4e8288e502", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49ed7cf1-330c-4afb-afe0-b31f813b743f", "record_id": "flaws_cloudtrail:0000475:49ed7cf1-330c-4afb-afe0-b31f813b743f", "row_index": 475, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49ed7cf1-330c-4afb-afe0-b31f813b743f", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "412ec2d5-084b-4b20-9701-80ab6b7f7496", "record_id": "flaws_cloudtrail:0000476:412ec2d5-084b-4b20-9701-80ab6b7f7496", "row_index": 476, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "412ec2d5-084b-4b20-9701-80ab6b7f7496", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "898c4f27-54b2-4bec-9e4e-84348bdd5fe5", "record_id": "flaws_cloudtrail:0000477:898c4f27-54b2-4bec-9e4e-84348bdd5fe5", "row_index": 477, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "898c4f27-54b2-4bec-9e4e-84348bdd5fe5", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fc845dd-8cd7-4ff9-a4b1-662e221b5dcc", "record_id": "flaws_cloudtrail:0000478:7fc845dd-8cd7-4ff9-a4b1-662e221b5dcc", "row_index": 478, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fc845dd-8cd7-4ff9-a4b1-662e221b5dcc", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85b5003e-acb9-49ee-ba3b-c52d6855757f", "record_id": "flaws_cloudtrail:0000479:85b5003e-acb9-49ee-ba3b-c52d6855757f", "row_index": 479, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85b5003e-acb9-49ee-ba3b-c52d6855757f", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d844d0f2-272f-40cb-b910-28d8e94b2d0f", "record_id": "flaws_cloudtrail:0000480:d844d0f2-272f-40cb-b910-28d8e94b2d0f", "row_index": 480, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d844d0f2-272f-40cb-b910-28d8e94b2d0f", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "717f351a-375d-4288-a0d4-74c2e3571ce4", "record_id": "flaws_cloudtrail:0000481:717f351a-375d-4288-a0d4-74c2e3571ce4", "row_index": 481, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "717f351a-375d-4288-a0d4-74c2e3571ce4", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc8b47a7-6582-45b9-8562-2d1be5f83879", "record_id": "flaws_cloudtrail:0000482:bc8b47a7-6582-45b9-8562-2d1be5f83879", "row_index": 482, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc8b47a7-6582-45b9-8562-2d1be5f83879", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b712f77-de1b-4796-8a8e-e83291deaf6e", "record_id": "flaws_cloudtrail:0000483:4b712f77-de1b-4796-8a8e-e83291deaf6e", "row_index": 483, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b712f77-de1b-4796-8a8e-e83291deaf6e", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee04d890-8086-4b3d-9603-68c2f1fd921d", "record_id": "flaws_cloudtrail:0000484:ee04d890-8086-4b3d-9603-68c2f1fd921d", "row_index": 484, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee04d890-8086-4b3d-9603-68c2f1fd921d", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6bbe399-3b50-4068-8235-de4e8288e502", "record_id": "flaws_cloudtrail:0000485:d6bbe399-3b50-4068-8235-de4e8288e502", "row_index": 485, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6bbe399-3b50-4068-8235-de4e8288e502", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49ed7cf1-330c-4afb-afe0-b31f813b743f", "record_id": "flaws_cloudtrail:0000486:49ed7cf1-330c-4afb-afe0-b31f813b743f", "row_index": 486, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49ed7cf1-330c-4afb-afe0-b31f813b743f", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "412ec2d5-084b-4b20-9701-80ab6b7f7496", "record_id": "flaws_cloudtrail:0000487:412ec2d5-084b-4b20-9701-80ab6b7f7496", "row_index": 487, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "412ec2d5-084b-4b20-9701-80ab6b7f7496", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "898c4f27-54b2-4bec-9e4e-84348bdd5fe5", "record_id": "flaws_cloudtrail:0000488:898c4f27-54b2-4bec-9e4e-84348bdd5fe5", "row_index": 488, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "898c4f27-54b2-4bec-9e4e-84348bdd5fe5", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fc845dd-8cd7-4ff9-a4b1-662e221b5dcc", "record_id": "flaws_cloudtrail:0000489:7fc845dd-8cd7-4ff9-a4b1-662e221b5dcc", "row_index": 489, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fc845dd-8cd7-4ff9-a4b1-662e221b5dcc", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85b5003e-acb9-49ee-ba3b-c52d6855757f", "record_id": "flaws_cloudtrail:0000490:85b5003e-acb9-49ee-ba3b-c52d6855757f", "row_index": 490, "timestamp": "2019-08-20T14:58:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85b5003e-acb9-49ee-ba3b-c52d6855757f", "eventTime": "2019-08-20T14:58:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1893fda-d1c6-444e-9644-8aada03288", "record_id": "flaws_cloudtrail:0000491:b1893fda-d1c6-444e-9644-8aada03288", "row_index": 491, "timestamp": "2019-08-20T14:58:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1893fda-d1c6-444e-9644-8aada03288", "eventTime": "2019-08-20T14:58:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "network-interface.group-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1893fda-d1c6-444e-9644-8aada03288", "record_id": "flaws_cloudtrail:0000492:b1893fda-d1c6-444e-9644-8aada03288", "row_index": 492, "timestamp": "2019-08-20T14:58:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1893fda-d1c6-444e-9644-8aada03288", "eventTime": "2019-08-20T14:58:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "network-interface.group-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecad029f-dcee-414f-9c1c-c39dda7b7bba", "record_id": "flaws_cloudtrail:0000493:ecad029f-dcee-414f-9c1c-c39dda7b7bba", "row_index": 493, "timestamp": "2019-08-20T14:58:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecad029f-dcee-414f-9c1c-c39dda7b7bba", "eventTime": "2019-08-20T14:58:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "network-interface.group-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecad029f-dcee-414f-9c1c-c39dda7b7bba", "record_id": "flaws_cloudtrail:0000494:ecad029f-dcee-414f-9c1c-c39dda7b7bba", "row_index": 494, "timestamp": "2019-08-20T14:58:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecad029f-dcee-414f-9c1c-c39dda7b7bba", "eventTime": "2019-08-20T14:58:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "network-interface.group-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1f317bb-87e4-437d-a8b6-f44442b", "record_id": "flaws_cloudtrail:0000495:a1f317bb-87e4-437d-a8b6-f44442b", "row_index": 495, "timestamp": "2019-08-20T14:59:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1f317bb-87e4-437d-a8b6-f44442b", "eventTime": "2019-08-20T14:59:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f2a735f-b37b-4db9-b4f8-db327cc37e88", "record_id": "flaws_cloudtrail:0000496:0f2a735f-b37b-4db9-b4f8-db327cc37e88", "row_index": 496, "timestamp": "2019-08-20T14:59:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f2a735f-b37b-4db9-b4f8-db327cc37e88", "eventTime": "2019-08-20T14:59:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdbf1f7f-8d62-431d-bfc2-35d701368e3", "record_id": "flaws_cloudtrail:0000497:cdbf1f7f-8d62-431d-bfc2-35d701368e3", "row_index": 497, "timestamp": "2019-08-20T14:59:36Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdbf1f7f-8d62-431d-bfc2-35d701368e3", "eventTime": "2019-08-20T14:59:36Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16c059113-6500-43bf-82ea-e55e50798cfa", "record_id": "flaws_cloudtrail:0000498:16c059113-6500-43bf-82ea-e55e50798cfa", "row_index": 498, "timestamp": "2019-08-20T14:59:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16c059113-6500-43bf-82ea-e55e50798cfa", "eventTime": "2019-08-20T14:59:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3b47209-7f05-4967-8492-e1b4d0a17517", "record_id": "flaws_cloudtrail:0000499:f3b47209-7f05-4967-8492-e1b4d0a17517", "row_index": 499, "timestamp": "2019-08-20T14:59:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3b47209-7f05-4967-8492-e1b4d0a17517", "eventTime": "2019-08-20T14:59:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce752888-6744-494e-b4f5-cc852409a3893", "record_id": "flaws_cloudtrail:0000500:ce752888-6744-494e-b4f5-cc852409a3893", "row_index": 500, "timestamp": "2019-08-20T14:59:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce752888-6744-494e-b4f5-cc852409a3893", "eventTime": "2019-08-20T14:59:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4695adf6-0cf2-45af-a7d2-b62503e8a463", "record_id": "flaws_cloudtrail:0000501:4695adf6-0cf2-45af-a7d2-b62503e8a463", "row_index": 501, "timestamp": "2019-08-20T14:59:36Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4695adf6-0cf2-45af-a7d2-b62503e8a463", "eventTime": "2019-08-20T14:59:36Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1f317bb-87e4-437d-a8b6-f44442b", "record_id": "flaws_cloudtrail:0000502:a1f317bb-87e4-437d-a8b6-f44442b", "row_index": 502, "timestamp": "2019-08-20T14:59:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1f317bb-87e4-437d-a8b6-f44442b", "eventTime": "2019-08-20T14:59:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f2a735f-b37b-4db9-b4f8-db327cc37e88", "record_id": "flaws_cloudtrail:0000503:0f2a735f-b37b-4db9-b4f8-db327cc37e88", "row_index": 503, "timestamp": "2019-08-20T14:59:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f2a735f-b37b-4db9-b4f8-db327cc37e88", "eventTime": "2019-08-20T14:59:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdbf1f7f-8d62-431d-bfc2-35d701368e3", "record_id": "flaws_cloudtrail:0000504:cdbf1f7f-8d62-431d-bfc2-35d701368e3", "row_index": 504, "timestamp": "2019-08-20T14:59:36Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdbf1f7f-8d62-431d-bfc2-35d701368e3", "eventTime": "2019-08-20T14:59:36Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16c059113-6500-43bf-82ea-e55e50798cfa", "record_id": "flaws_cloudtrail:0000505:16c059113-6500-43bf-82ea-e55e50798cfa", "row_index": 505, "timestamp": "2019-08-20T14:59:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16c059113-6500-43bf-82ea-e55e50798cfa", "eventTime": "2019-08-20T14:59:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3b47209-7f05-4967-8492-e1b4d0a17517", "record_id": "flaws_cloudtrail:0000506:f3b47209-7f05-4967-8492-e1b4d0a17517", "row_index": 506, "timestamp": "2019-08-20T14:59:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3b47209-7f05-4967-8492-e1b4d0a17517", "eventTime": "2019-08-20T14:59:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce752888-6744-494e-b4f5-cc852409a3893", "record_id": "flaws_cloudtrail:0000507:ce752888-6744-494e-b4f5-cc852409a3893", "row_index": 507, "timestamp": "2019-08-20T14:59:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce752888-6744-494e-b4f5-cc852409a3893", "eventTime": "2019-08-20T14:59:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4695adf6-0cf2-45af-a7d2-b62503e8a463", "record_id": "flaws_cloudtrail:0000508:4695adf6-0cf2-45af-a7d2-b62503e8a463", "row_index": 508, "timestamp": "2019-08-20T14:59:36Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4695adf6-0cf2-45af-a7d2-b62503e8a463", "eventTime": "2019-08-20T14:59:36Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3da8fac-9358-4deb-bbba-6e5959535c53", "record_id": "flaws_cloudtrail:0000509:d3da8fac-9358-4deb-bbba-6e5959535c53", "row_index": 509, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3da8fac-9358-4deb-bbba-6e5959535c53", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46411cad-d671-467b-9fe5-2f2cf13b8b2c", "record_id": "flaws_cloudtrail:0000510:46411cad-d671-467b-9fe5-2f2cf13b8b2c", "row_index": 510, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46411cad-d671-467b-9fe5-2f2cf13b8b2c", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "974140a4-17ce-478f-a177-8c37b7b850db", "record_id": "flaws_cloudtrail:0000511:974140a4-17ce-478f-a177-8c37b7b850db", "row_index": 511, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "974140a4-17ce-478f-a177-8c37b7b850db", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d8f4eeb-b338-4300-a932-742dad5baf1f", "record_id": "flaws_cloudtrail:0000512:6d8f4eeb-b338-4300-a932-742dad5baf1f", "row_index": 512, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d8f4eeb-b338-4300-a932-742dad5baf1f", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "614758bbd-bf7c-4ad0-befb-cd40a3a91fe5", "record_id": "flaws_cloudtrail:0000513:614758bbd-bf7c-4ad0-befb-cd40a3a91fe5", "row_index": 513, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "614758bbd-bf7c-4ad0-befb-cd40a3a91fe5", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1ea2a94-c331-4b42-8f5f-4f5330080222", "record_id": "flaws_cloudtrail:0000514:b1ea2a94-c331-4b42-8f5f-4f5330080222", "row_index": 514, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1ea2a94-c331-4b42-8f5f-4f5330080222", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a054d044-4155-416d-af56-0cd2c502b25f", "record_id": "flaws_cloudtrail:0000515:a054d044-4155-416d-af56-0cd2c502b25f", "row_index": 515, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a054d044-4155-416d-af56-0cd2c502b25f", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66c0055b-7f6c-49be-9ab0-0801abda946b", "record_id": "flaws_cloudtrail:0000516:66c0055b-7f6c-49be-9ab0-0801abda946b", "row_index": 516, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66c0055b-7f6c-49be-9ab0-0801abda946b", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4453a181-7034-4100-8d79-8d2c99db3c39", "record_id": "flaws_cloudtrail:0000517:4453a181-7034-4100-8d79-8d2c99db3c39", "row_index": 517, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4453a181-7034-4100-8d79-8d2c99db3c39", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5300a592-5166-44ae-836b-3c841d396837", "record_id": "flaws_cloudtrail:0000518:5300a592-5166-44ae-836b-3c841d396837", "row_index": 518, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5300a592-5166-44ae-836b-3c841d396837", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4885dc68-82de-4e51-92a8-96a6844eb6c5", "record_id": "flaws_cloudtrail:0000519:4885dc68-82de-4e51-92a8-96a6844eb6c5", "row_index": 519, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4885dc68-82de-4e51-92a8-96a6844eb6c5", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a86787f-a699-4fe0-ac3b-695b4028cd11", "record_id": "flaws_cloudtrail:0000520:a86787f-a699-4fe0-ac3b-695b4028cd11", "row_index": 520, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a86787f-a699-4fe0-ac3b-695b4028cd11", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d20ef62e-a076-45fa-b8e7-3de9ee65f491", "record_id": "flaws_cloudtrail:0000521:d20ef62e-a076-45fa-b8e7-3de9ee65f491", "row_index": 521, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d20ef62e-a076-45fa-b8e7-3de9ee65f491", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ce63ffc-59d2-4526-8d0a-1e413dbb8468", "record_id": "flaws_cloudtrail:0000522:9ce63ffc-59d2-4526-8d0a-1e413dbb8468", "row_index": 522, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ce63ffc-59d2-4526-8d0a-1e413dbb8468", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0874cf7d-bb2c-45dd-9b3e-f805757d4863", "record_id": "flaws_cloudtrail:0000523:0874cf7d-bb2c-45dd-9b3e-f805757d4863", "row_index": 523, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0874cf7d-bb2c-45dd-9b3e-f805757d4863", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e2d1834-c66b-4b7b-8c29-522dac55cd67", "record_id": "flaws_cloudtrail:0000524:9e2d1834-c66b-4b7b-8c29-522dac55cd67", "row_index": 524, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e2d1834-c66b-4b7b-8c29-522dac55cd67", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1515d477-84dc-4527-83bc-f461505632ce", "record_id": "flaws_cloudtrail:0000525:1515d477-84dc-4527-83bc-f461505632ce", "row_index": 525, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1515d477-84dc-4527-83bc-f461505632ce", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fdd03bf-3252-4866-95d7-b312ce64574", "record_id": "flaws_cloudtrail:0000526:1fdd03bf-3252-4866-95d7-b312ce64574", "row_index": 526, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fdd03bf-3252-4866-95d7-b312ce64574", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3da8fac-9358-4deb-bbba-6e5959535c53", "record_id": "flaws_cloudtrail:0000527:d3da8fac-9358-4deb-bbba-6e5959535c53", "row_index": 527, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3da8fac-9358-4deb-bbba-6e5959535c53", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46411cad-d671-467b-9fe5-2f2cf13b8b2c", "record_id": "flaws_cloudtrail:0000528:46411cad-d671-467b-9fe5-2f2cf13b8b2c", "row_index": 528, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46411cad-d671-467b-9fe5-2f2cf13b8b2c", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "974140a4-17ce-478f-a177-8c37b7b850db", "record_id": "flaws_cloudtrail:0000529:974140a4-17ce-478f-a177-8c37b7b850db", "row_index": 529, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "974140a4-17ce-478f-a177-8c37b7b850db", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d8f4eeb-b338-4300-a932-742dad5baf1f", "record_id": "flaws_cloudtrail:0000530:6d8f4eeb-b338-4300-a932-742dad5baf1f", "row_index": 530, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d8f4eeb-b338-4300-a932-742dad5baf1f", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "614758bbd-bf7c-4ad0-befb-cd40a3a91fe5", "record_id": "flaws_cloudtrail:0000531:614758bbd-bf7c-4ad0-befb-cd40a3a91fe5", "row_index": 531, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "614758bbd-bf7c-4ad0-befb-cd40a3a91fe5", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1ea2a94-c331-4b42-8f5f-4f5330080222", "record_id": "flaws_cloudtrail:0000532:b1ea2a94-c331-4b42-8f5f-4f5330080222", "row_index": 532, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1ea2a94-c331-4b42-8f5f-4f5330080222", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a054d044-4155-416d-af56-0cd2c502b25f", "record_id": "flaws_cloudtrail:0000533:a054d044-4155-416d-af56-0cd2c502b25f", "row_index": 533, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a054d044-4155-416d-af56-0cd2c502b25f", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66c0055b-7f6c-49be-9ab0-0801abda946b", "record_id": "flaws_cloudtrail:0000534:66c0055b-7f6c-49be-9ab0-0801abda946b", "row_index": 534, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66c0055b-7f6c-49be-9ab0-0801abda946b", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4453a181-7034-4100-8d79-8d2c99db3c39", "record_id": "flaws_cloudtrail:0000535:4453a181-7034-4100-8d79-8d2c99db3c39", "row_index": 535, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4453a181-7034-4100-8d79-8d2c99db3c39", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5300a592-5166-44ae-836b-3c841d396837", "record_id": "flaws_cloudtrail:0000536:5300a592-5166-44ae-836b-3c841d396837", "row_index": 536, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5300a592-5166-44ae-836b-3c841d396837", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4885dc68-82de-4e51-92a8-96a6844eb6c5", "record_id": "flaws_cloudtrail:0000537:4885dc68-82de-4e51-92a8-96a6844eb6c5", "row_index": 537, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4885dc68-82de-4e51-92a8-96a6844eb6c5", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a86787f-a699-4fe0-ac3b-695b4028cd11", "record_id": "flaws_cloudtrail:0000538:a86787f-a699-4fe0-ac3b-695b4028cd11", "row_index": 538, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a86787f-a699-4fe0-ac3b-695b4028cd11", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d20ef62e-a076-45fa-b8e7-3de9ee65f491", "record_id": "flaws_cloudtrail:0000539:d20ef62e-a076-45fa-b8e7-3de9ee65f491", "row_index": 539, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d20ef62e-a076-45fa-b8e7-3de9ee65f491", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ce63ffc-59d2-4526-8d0a-1e413dbb8468", "record_id": "flaws_cloudtrail:0000540:9ce63ffc-59d2-4526-8d0a-1e413dbb8468", "row_index": 540, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ce63ffc-59d2-4526-8d0a-1e413dbb8468", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0874cf7d-bb2c-45dd-9b3e-f805757d4863", "record_id": "flaws_cloudtrail:0000541:0874cf7d-bb2c-45dd-9b3e-f805757d4863", "row_index": 541, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0874cf7d-bb2c-45dd-9b3e-f805757d4863", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e2d1834-c66b-4b7b-8c29-522dac55cd67", "record_id": "flaws_cloudtrail:0000542:9e2d1834-c66b-4b7b-8c29-522dac55cd67", "row_index": 542, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e2d1834-c66b-4b7b-8c29-522dac55cd67", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1515d477-84dc-4527-83bc-f461505632ce", "record_id": "flaws_cloudtrail:0000543:1515d477-84dc-4527-83bc-f461505632ce", "row_index": 543, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1515d477-84dc-4527-83bc-f461505632ce", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fdd03bf-3252-4866-95d7-b312ce64574", "record_id": "flaws_cloudtrail:0000544:1fdd03bf-3252-4866-95d7-b312ce64574", "row_index": 544, "timestamp": "2019-08-20T14:59:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fdd03bf-3252-4866-95d7-b312ce64574", "eventTime": "2019-08-20T14:59:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8aa69ad-26da-48a7-b4da-d82d48f8aaf2", "record_id": "flaws_cloudtrail:0000545:c8aa69ad-26da-48a7-b4da-d82d48f8aaf2", "row_index": 545, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8aa69ad-26da-48a7-b4da-d82d48f8aaf2", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d408169e-9c63-4cf8-a2cb-741aa6436482", "record_id": "flaws_cloudtrail:0000546:d408169e-9c63-4cf8-a2cb-741aa6436482", "row_index": 546, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 874, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d408169e-9c63-4cf8-a2cb-741aa6436482", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87671e3-4da8-4fb1-8879-dc501f43bd62", "record_id": "flaws_cloudtrail:0000547:87671e3-4da8-4fb1-8879-dc501f43bd62", "row_index": 547, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87671e3-4da8-4fb1-8879-dc501f43bd62", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f6d0980-6006-4f5f-8c38-dec7c6b52cfb", "record_id": "flaws_cloudtrail:0000548:9f6d0980-6006-4f5f-8c38-dec7c6b52cfb", "row_index": 548, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f6d0980-6006-4f5f-8c38-dec7c6b52cfb", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a5f030d-1c8a-454b-b938-5dfec36242", "record_id": "flaws_cloudtrail:0000549:9a5f030d-1c8a-454b-b938-5dfec36242", "row_index": 549, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a5f030d-1c8a-454b-b938-5dfec36242", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b6b03e3-dc90-44c6-a3a3-4403ffda3f7b", "record_id": "flaws_cloudtrail:0000550:5b6b03e3-dc90-44c6-a3a3-4403ffda3f7b", "row_index": 550, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b6b03e3-dc90-44c6-a3a3-4403ffda3f7b", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "390620-ad62-4ae5-a7ca-0acdfe17feba", "record_id": "flaws_cloudtrail:0000551:390620-ad62-4ae5-a7ca-0acdfe17feba", "row_index": 551, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "390620-ad62-4ae5-a7ca-0acdfe17feba", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f82ce01c-eb6c-4f85-9be5-04ea7f932ea8", "record_id": "flaws_cloudtrail:0000552:f82ce01c-eb6c-4f85-9be5-04ea7f932ea8", "row_index": 552, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f82ce01c-eb6c-4f85-9be5-04ea7f932ea8", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "network-interface.group-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0b10e55-af4e-4048-a46d-05a3ea9f25e3", "record_id": "flaws_cloudtrail:0000553:c0b10e55-af4e-4048-a46d-05a3ea9f25e3", "row_index": 553, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0b10e55-af4e-4048-a46d-05a3ea9f25e3", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "network-interface.group-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff698969c-f37d-4499-9974-88a9e23d20d8", "record_id": "flaws_cloudtrail:0000554:ff698969c-f37d-4499-9974-88a9e23d20d8", "row_index": 554, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 872, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff698969c-f37d-4499-9974-88a9e23d20d8", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8aa69ad-26da-48a7-b4da-d82d48f8aaf2", "record_id": "flaws_cloudtrail:0000555:c8aa69ad-26da-48a7-b4da-d82d48f8aaf2", "row_index": 555, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8aa69ad-26da-48a7-b4da-d82d48f8aaf2", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d408169e-9c63-4cf8-a2cb-741aa6436482", "record_id": "flaws_cloudtrail:0000556:d408169e-9c63-4cf8-a2cb-741aa6436482", "row_index": 556, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 874, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d408169e-9c63-4cf8-a2cb-741aa6436482", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87671e3-4da8-4fb1-8879-dc501f43bd62", "record_id": "flaws_cloudtrail:0000557:87671e3-4da8-4fb1-8879-dc501f43bd62", "row_index": 557, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87671e3-4da8-4fb1-8879-dc501f43bd62", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f6d0980-6006-4f5f-8c38-dec7c6b52cfb", "record_id": "flaws_cloudtrail:0000558:9f6d0980-6006-4f5f-8c38-dec7c6b52cfb", "row_index": 558, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f6d0980-6006-4f5f-8c38-dec7c6b52cfb", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a5f030d-1c8a-454b-b938-5dfec36242", "record_id": "flaws_cloudtrail:0000559:9a5f030d-1c8a-454b-b938-5dfec36242", "row_index": 559, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a5f030d-1c8a-454b-b938-5dfec36242", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b6b03e3-dc90-44c6-a3a3-4403ffda3f7b", "record_id": "flaws_cloudtrail:0000560:5b6b03e3-dc90-44c6-a3a3-4403ffda3f7b", "row_index": 560, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b6b03e3-dc90-44c6-a3a3-4403ffda3f7b", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "390620-ad62-4ae5-a7ca-0acdfe17feba", "record_id": "flaws_cloudtrail:0000561:390620-ad62-4ae5-a7ca-0acdfe17feba", "row_index": 561, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "390620-ad62-4ae5-a7ca-0acdfe17feba", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f82ce01c-eb6c-4f85-9be5-04ea7f932ea8", "record_id": "flaws_cloudtrail:0000562:f82ce01c-eb6c-4f85-9be5-04ea7f932ea8", "row_index": 562, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f82ce01c-eb6c-4f85-9be5-04ea7f932ea8", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "network-interface.group-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0b10e55-af4e-4048-a46d-05a3ea9f25e3", "record_id": "flaws_cloudtrail:0000563:c0b10e55-af4e-4048-a46d-05a3ea9f25e3", "row_index": 563, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0b10e55-af4e-4048-a46d-05a3ea9f25e3", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "network-interface.group-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "instance-state-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff698969c-f37d-4499-9974-88a9e23d20d8", "record_id": "flaws_cloudtrail:0000564:ff698969c-f37d-4499-9974-88a9e23d20d8", "row_index": 564, "timestamp": "2019-08-20T14:59:38Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 872, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff698969c-f37d-4499-9974-88a9e23d20d8", "eventTime": "2019-08-20T14:59:38Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ae23b42-c093-4430-b3ca-2f806da8ab97", "record_id": "flaws_cloudtrail:0000565:5ae23b42-c093-4430-b3ca-2f806da8ab97", "row_index": 565, "timestamp": "2019-08-20T14:59:50Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ae23b42-c093-4430-b3ca-2f806da8ab97", "eventTime": "2019-08-20T14:59:50Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4d721b7-69d7-42dc-af5e-e53236b929fb", "record_id": "flaws_cloudtrail:0000566:e4d721b7-69d7-42dc-af5e-e53236b929fb", "row_index": 566, "timestamp": "2019-08-20T14:59:50Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4d721b7-69d7-42dc-af5e-e53236b929fb", "eventTime": "2019-08-20T14:59:50Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e45362-0327-4ded-ba0b-6645b67c3a39", "record_id": "flaws_cloudtrail:0000567:1e45362-0327-4ded-ba0b-6645b67c3a39", "row_index": 567, "timestamp": "2019-08-20T14:59:50Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e45362-0327-4ded-ba0b-6645b67c3a39", "eventTime": "2019-08-20T14:59:50Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8bd5e0d-8ee7-4dea-8736-5f7b00d65259", "record_id": "flaws_cloudtrail:0000568:a8bd5e0d-8ee7-4dea-8736-5f7b00d65259", "row_index": 568, "timestamp": "2019-08-20T14:59:50Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8bd5e0d-8ee7-4dea-8736-5f7b00d65259", "eventTime": "2019-08-20T14:59:50Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ae23b42-c093-4430-b3ca-2f806da8ab97", "record_id": "flaws_cloudtrail:0000569:5ae23b42-c093-4430-b3ca-2f806da8ab97", "row_index": 569, "timestamp": "2019-08-20T14:59:50Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ae23b42-c093-4430-b3ca-2f806da8ab97", "eventTime": "2019-08-20T14:59:50Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4d721b7-69d7-42dc-af5e-e53236b929fb", "record_id": "flaws_cloudtrail:0000570:e4d721b7-69d7-42dc-af5e-e53236b929fb", "row_index": 570, "timestamp": "2019-08-20T14:59:50Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4d721b7-69d7-42dc-af5e-e53236b929fb", "eventTime": "2019-08-20T14:59:50Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e45362-0327-4ded-ba0b-6645b67c3a39", "record_id": "flaws_cloudtrail:0000571:1e45362-0327-4ded-ba0b-6645b67c3a39", "row_index": 571, "timestamp": "2019-08-20T14:59:50Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e45362-0327-4ded-ba0b-6645b67c3a39", "eventTime": "2019-08-20T14:59:50Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8bd5e0d-8ee7-4dea-8736-5f7b00d65259", "record_id": "flaws_cloudtrail:0000572:a8bd5e0d-8ee7-4dea-8736-5f7b00d65259", "row_index": 572, "timestamp": "2019-08-20T14:59:50Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8bd5e0d-8ee7-4dea-8736-5f7b00d65259", "eventTime": "2019-08-20T14:59:50Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98931f3c-b9cf-4f79-a3a2-a1fa415305b1", "record_id": "flaws_cloudtrail:0000573:98931f3c-b9cf-4f79-a3a2-a1fa415305b1", "row_index": 573, "timestamp": "2019-08-20T14:59:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98931f3c-b9cf-4f79-a3a2-a1fa415305b1", "eventTime": "2019-08-20T14:59:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3aab04a1-7f87-424c-a277-c6700cb5c194", "record_id": "flaws_cloudtrail:0000574:3aab04a1-7f87-424c-a277-c6700cb5c194", "row_index": 574, "timestamp": "2019-08-20T14:59:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3aab04a1-7f87-424c-a277-c6700cb5c194", "eventTime": "2019-08-20T14:59:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2022e861-e72a-4c0c-bc50-6dee65717a76", "record_id": "flaws_cloudtrail:0000575:2022e861-e72a-4c0c-bc50-6dee65717a76", "row_index": 575, "timestamp": "2019-08-20T14:59:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2022e861-e72a-4c0c-bc50-6dee65717a76", "eventTime": "2019-08-20T14:59:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "332989fba-5c4d-4f78-98bb-8738a971482d", "record_id": "flaws_cloudtrail:0000576:332989fba-5c4d-4f78-98bb-8738a971482d", "row_index": 576, "timestamp": "2019-08-20T14:59:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "332989fba-5c4d-4f78-98bb-8738a971482d", "eventTime": "2019-08-20T14:59:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dea46fff-2adc-4023-bcd1-d85f8342ef39", "record_id": "flaws_cloudtrail:0000577:dea46fff-2adc-4023-bcd1-d85f8342ef39", "row_index": 577, "timestamp": "2019-08-20T14:59:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dea46fff-2adc-4023-bcd1-d85f8342ef39", "eventTime": "2019-08-20T14:59:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccad1e72-15ee-4c91-bd45-c484b531629f", "record_id": "flaws_cloudtrail:0000578:ccad1e72-15ee-4c91-bd45-c484b531629f", "row_index": 578, "timestamp": "2019-08-20T14:59:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccad1e72-15ee-4c91-bd45-c484b531629f", "eventTime": "2019-08-20T14:59:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7d0223e-6d26-479b-8a40-658c32c7cd72", "record_id": "flaws_cloudtrail:0000579:a7d0223e-6d26-479b-8a40-658c32c7cd72", "row_index": 579, "timestamp": "2019-08-20T14:59:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7d0223e-6d26-479b-8a40-658c32c7cd72", "eventTime": "2019-08-20T14:59:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69d764623-b556-472a-9b3f-6d79fbfde4e5", "record_id": "flaws_cloudtrail:0000580:69d764623-b556-472a-9b3f-6d79fbfde4e5", "row_index": 580, "timestamp": "2019-08-20T14:59:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69d764623-b556-472a-9b3f-6d79fbfde4e5", "eventTime": "2019-08-20T14:59:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98931f3c-b9cf-4f79-a3a2-a1fa415305b1", "record_id": "flaws_cloudtrail:0000581:98931f3c-b9cf-4f79-a3a2-a1fa415305b1", "row_index": 581, "timestamp": "2019-08-20T14:59:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98931f3c-b9cf-4f79-a3a2-a1fa415305b1", "eventTime": "2019-08-20T14:59:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3aab04a1-7f87-424c-a277-c6700cb5c194", "record_id": "flaws_cloudtrail:0000582:3aab04a1-7f87-424c-a277-c6700cb5c194", "row_index": 582, "timestamp": "2019-08-20T14:59:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3aab04a1-7f87-424c-a277-c6700cb5c194", "eventTime": "2019-08-20T14:59:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2022e861-e72a-4c0c-bc50-6dee65717a76", "record_id": "flaws_cloudtrail:0000583:2022e861-e72a-4c0c-bc50-6dee65717a76", "row_index": 583, "timestamp": "2019-08-20T14:59:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2022e861-e72a-4c0c-bc50-6dee65717a76", "eventTime": "2019-08-20T14:59:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "332989fba-5c4d-4f78-98bb-8738a971482d", "record_id": "flaws_cloudtrail:0000584:332989fba-5c4d-4f78-98bb-8738a971482d", "row_index": 584, "timestamp": "2019-08-20T14:59:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "332989fba-5c4d-4f78-98bb-8738a971482d", "eventTime": "2019-08-20T14:59:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dea46fff-2adc-4023-bcd1-d85f8342ef39", "record_id": "flaws_cloudtrail:0000585:dea46fff-2adc-4023-bcd1-d85f8342ef39", "row_index": 585, "timestamp": "2019-08-20T14:59:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dea46fff-2adc-4023-bcd1-d85f8342ef39", "eventTime": "2019-08-20T14:59:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccad1e72-15ee-4c91-bd45-c484b531629f", "record_id": "flaws_cloudtrail:0000586:ccad1e72-15ee-4c91-bd45-c484b531629f", "row_index": 586, "timestamp": "2019-08-20T14:59:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccad1e72-15ee-4c91-bd45-c484b531629f", "eventTime": "2019-08-20T14:59:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7d0223e-6d26-479b-8a40-658c32c7cd72", "record_id": "flaws_cloudtrail:0000587:a7d0223e-6d26-479b-8a40-658c32c7cd72", "row_index": 587, "timestamp": "2019-08-20T14:59:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7d0223e-6d26-479b-8a40-658c32c7cd72", "eventTime": "2019-08-20T14:59:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69d764623-b556-472a-9b3f-6d79fbfde4e5", "record_id": "flaws_cloudtrail:0000588:69d764623-b556-472a-9b3f-6d79fbfde4e5", "row_index": 588, "timestamp": "2019-08-20T14:59:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69d764623-b556-472a-9b3f-6d79fbfde4e5", "eventTime": "2019-08-20T14:59:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7975a2f-5828-4d65-8dfa-0af688afe804", "record_id": "flaws_cloudtrail:0000589:a7975a2f-5828-4d65-8dfa-0af688afe804", "row_index": 589, "timestamp": "2019-08-20T14:59:52Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7975a2f-5828-4d65-8dfa-0af688afe804", "eventTime": "2019-08-20T14:59:52Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f297ea8-3342-479e-b5cb-46727aee34f1", "record_id": "flaws_cloudtrail:0000590:9f297ea8-3342-479e-b5cb-46727aee34f1", "row_index": 590, "timestamp": "2019-08-20T14:59:52Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f297ea8-3342-479e-b5cb-46727aee34f1", "eventTime": "2019-08-20T14:59:52Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e86bcb0f-99e2-4e04-8810-99f8f62d205f", "record_id": "flaws_cloudtrail:0000591:e86bcb0f-99e2-4e04-8810-99f8f62d205f", "row_index": 591, "timestamp": "2019-08-20T14:59:52Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e86bcb0f-99e2-4e04-8810-99f8f62d205f", "eventTime": "2019-08-20T14:59:52Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa867187-69c2-4ea6-a3ce-46b3a5c8f4da", "record_id": "flaws_cloudtrail:0000592:fa867187-69c2-4ea6-a3ce-46b3a5c8f4da", "row_index": 592, "timestamp": "2019-08-20T14:59:52Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa867187-69c2-4ea6-a3ce-46b3a5c8f4da", "eventTime": "2019-08-20T14:59:52Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c137b678-8e8b-465f-b165-66dece19e11e", "record_id": "flaws_cloudtrail:0000593:c137b678-8e8b-465f-b165-66dece19e11e", "row_index": 593, "timestamp": "2019-08-20T14:59:52Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c137b678-8e8b-465f-b165-66dece19e11e", "eventTime": "2019-08-20T14:59:52Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7975a2f-5828-4d65-8dfa-0af688afe804", "record_id": "flaws_cloudtrail:0000594:a7975a2f-5828-4d65-8dfa-0af688afe804", "row_index": 594, "timestamp": "2019-08-20T14:59:52Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7975a2f-5828-4d65-8dfa-0af688afe804", "eventTime": "2019-08-20T14:59:52Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f297ea8-3342-479e-b5cb-46727aee34f1", "record_id": "flaws_cloudtrail:0000595:9f297ea8-3342-479e-b5cb-46727aee34f1", "row_index": 595, "timestamp": "2019-08-20T14:59:52Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f297ea8-3342-479e-b5cb-46727aee34f1", "eventTime": "2019-08-20T14:59:52Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e86bcb0f-99e2-4e04-8810-99f8f62d205f", "record_id": "flaws_cloudtrail:0000596:e86bcb0f-99e2-4e04-8810-99f8f62d205f", "row_index": 596, "timestamp": "2019-08-20T14:59:52Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e86bcb0f-99e2-4e04-8810-99f8f62d205f", "eventTime": "2019-08-20T14:59:52Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa867187-69c2-4ea6-a3ce-46b3a5c8f4da", "record_id": "flaws_cloudtrail:0000597:fa867187-69c2-4ea6-a3ce-46b3a5c8f4da", "row_index": 597, "timestamp": "2019-08-20T14:59:52Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa867187-69c2-4ea6-a3ce-46b3a5c8f4da", "eventTime": "2019-08-20T14:59:52Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c137b678-8e8b-465f-b165-66dece19e11e", "record_id": "flaws_cloudtrail:0000598:c137b678-8e8b-465f-b165-66dece19e11e", "row_index": 598, "timestamp": "2019-08-20T14:59:52Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c137b678-8e8b-465f-b165-66dece19e11e", "eventTime": "2019-08-20T14:59:52Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}, {"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "551257-2841-49c3-8d64-53553c024a1", "record_id": "flaws_cloudtrail:0000599:551257-2841-49c3-8d64-53553c024a1", "row_index": 599, "timestamp": "2019-08-20T15:00:04Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "551257-2841-49c3-8d64-53553c024a1", "eventTime": "2019-08-20T15:00:04Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "551257-2841-49c3-8d64-53553c024a1", "record_id": "flaws_cloudtrail:0000600:551257-2841-49c3-8d64-53553c024a1", "row_index": 600, "timestamp": "2019-08-20T15:00:04Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "551257-2841-49c3-8d64-53553c024a1", "eventTime": "2019-08-20T15:00:04Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffec2d0b-afeb-494a-8e50-9047edc3f1c3", "record_id": "flaws_cloudtrail:0000601:ffec2d0b-afeb-494a-8e50-9047edc3f1c3", "row_index": 601, "timestamp": "2019-08-20T15:00:05Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffec2d0b-afeb-494a-8e50-9047edc3f1c3", "eventTime": "2019-08-20T15:00:05Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86a21cc5-74d0-4ab5-802e-bdea51153b90", "record_id": "flaws_cloudtrail:0000602:86a21cc5-74d0-4ab5-802e-bdea51153b90", "row_index": 602, "timestamp": "2019-08-20T15:00:05Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86a21cc5-74d0-4ab5-802e-bdea51153b90", "eventTime": "2019-08-20T15:00:05Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57edd4ee-d95c-4429-9064-e47c02394f99", "record_id": "flaws_cloudtrail:0000603:57edd4ee-d95c-4429-9064-e47c02394f99", "row_index": 603, "timestamp": "2019-08-20T15:00:05Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57edd4ee-d95c-4429-9064-e47c02394f99", "eventTime": "2019-08-20T15:00:05Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "747654e4-9e12-4ad1-a19a-92edade2157f", "record_id": "flaws_cloudtrail:0000604:747654e4-9e12-4ad1-a19a-92edade2157f", "row_index": 604, "timestamp": "2019-08-20T15:00:05Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "747654e4-9e12-4ad1-a19a-92edade2157f", "eventTime": "2019-08-20T15:00:05Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df81f0e5-b3e3-44f8-b3fd-437e311c2a4c", "record_id": "flaws_cloudtrail:0000605:df81f0e5-b3e3-44f8-b3fd-437e311c2a4c", "row_index": 605, "timestamp": "2019-08-20T15:00:05Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.170.3.216", "user_agent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df81f0e5-b3e3-44f8-b3fd-437e311c2a4c", "eventTime": "2019-08-20T15:00:05Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.170.3.216", "userAgent": "aws-sdk-nodejs/2.463.0 win32/v8.11.1 exec-env/AWS_Lambda_nodejs", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {"items": [{"name": "owner-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}